castle-web-cli 0.4.64 → 0.4.66

package/dist/castle-host/host.d.ts

@@ -35,6 +35,7 @@ export type PlatformHandler = (
 export interface HostCapabilities {
   graphqlFetch: GraphqlFetch;
   platformHandler?: PlatformHandler;
+  localPassGrant?: (passId: string) => boolean;
 }
 
 export interface SerializedCommandError {

package/dist/castle-host/host.js

@@ -94,7 +94,7 @@ function runCommand(ctx, command, params, caps) {
         case "time.getServerTime":
             return timeGetServerTime(gql);
         case "pass.has":
-            return passHas(ctx, params, gql);
+            return passHas(ctx, params, caps);
         // Platform commands are handled above; listed here to keep the switch
         // exhaustive over CommandName.
         case "pass.offer":
@@ -114,10 +114,13 @@ async function runPlatformCommand(ctx, command, params, caps) {
             return unavailableOutcome(command);
     }
 }
-async function passHas(ctx, params, gql) {
-    const deckId = requireDeckId(ctx, "pass.has");
+async function passHas(ctx, params, caps) {
     const passId = asString(params.passId, "passId", "pass.has");
-    const data = await graphql(gql, PASSES_FOR_DECK_QUERY, { deckId }, "pass.has");
+    if (caps.localPassGrant?.(passId) === true) {
+        return { hasPass: true };
+    }
+    const deckId = requireDeckId(ctx, "pass.has");
+    const data = await graphql(caps.graphqlFetch, PASSES_FOR_DECK_QUERY, { deckId }, "pass.has");
     const match = (data.passesForDeck ?? []).find((p) => p?.passId === passId);
     return { hasPass: match?.isActive === true };
 }
@@ -127,6 +130,8 @@ async function passesOffer(ctx, params, caps) {
     // unavailable, never an error or a thrown MISSING_DECK_ID.
     if (!caps.platformHandler)
         return { status: "unavailable" };
+    if (caps.localPassGrant?.(passId) === true)
+        return { status: "alreadyOwned" };
     // Real transaction path (mobile native sheet; web upsell): the pass belongs
     // to a deck, so a trusted deckId is required before handing off.
     const deckId = requireDeckId(ctx, "pass.offer");

package/dist/config.js

@@ -32,11 +32,16 @@ function writeConfig(updates) {
     const configFilePath = path.join(configDir, 'config.json');
     fs.writeFileSync(configFilePath, JSON.stringify(existing, null, 2), 'utf-8');
 }
+// Env overrides on-disk config so a caller can act as a user without writing the token to disk.
 export function getToken() {
+    if (process.env.CASTLE_TOKEN)
+        return process.env.CASTLE_TOKEN;
     const c = readConfigFile('config.json');
     return c && typeof c.token === 'string' ? c.token : null;
 }
 export function getUserId() {
+    if (process.env.CASTLE_USER_ID)
+        return process.env.CASTLE_USER_ID;
     const c = readConfigFile('config.json');
     return c && typeof c.userId === 'string' ? c.userId : null;
 }