@teincfood/core 0.10.0 → 0.10.2

package/dist/index.d.ts

@@ -157,6 +157,7 @@ export { notifyAuthChanged, subscribeAuth } from "./adapters/auth";
 export { isAuthenticated, hasActiveBusiness, canBusinessSync, setOfflineSyncEnabled, isOfflineSyncEnabled } from "./sync/sync-guard";
 export { ACCESS_EXPIRED_CODE, SESSION_DEAD_CODES, SKIP_AUTH_RETRY, extractAuthFailure, isAccessExpired, isSessionDead, hasAuthRetrySkip, refreshSession, withAuthRetry, setOfflineSessionRecoveryProvider, } from "./auth/session";
 export * from "./offline/license";
+export * from "./offline/random";
 export * from "./offline/store";
 export * from "./offline/service";
 export type { AuthFailure, SessionTokens } from "./auth/session";

package/dist/index.js

@@ -173,6 +173,7 @@ export { isAuthenticated, hasActiveBusiness, canBusinessSync, setOfflineSyncEnab
 export { ACCESS_EXPIRED_CODE, SESSION_DEAD_CODES, SKIP_AUTH_RETRY, extractAuthFailure, isAccessExpired, isSessionDead, hasAuthRetrySkip, refreshSession, withAuthRetry, setOfflineSessionRecoveryProvider, } from "./auth/session";
 // ── Offline device license + member unlock ──
 export * from "./offline/license";
+export * from "./offline/random";
 export * from "./offline/store";
 export * from "./offline/service";
 // ── Image cache (durable) ──

package/dist/local-node/service.js

@@ -10,6 +10,7 @@ import { applyPendingOrderEvent, applyOrderStateChangeEvent, notifyPendingOrders
 import { applyMenuCommandLocal } from "../reference/menu-apply";
 import { REFERENCE_CHANGED_EVENT_TYPE } from "../reference/events";
 import { applyReferenceChangeEvent } from "../reference/events";
+import { referenceSyncService } from "../reference/service";
 import { openSyncDatabase } from "../db/connection";
 import { insertOrder } from "../db/operations";
 import { createLocalOrder, transitionLocalOrder } from "../domain/orders/service";
@@ -567,6 +568,16 @@ class LocalNodeServiceCore {
                 syncLogger.info("LocalNodeService", "Connected to peer", { deviceId: node.deviceId });
                 this.peerInfos.set(node.deviceId, { deviceId: node.deviceId, host: node.host, port: node.port });
                 localNodeStore.getState().addConnectedClient({ deviceId: node.deviceId, deviceName: node.deviceName, host: node.host, connectedAt: new Date().toISOString() });
+                // A terminal may have missed `reference_data.changed` while it was
+                // disconnected. Compare versions with the peer on reconnect so menu,
+                // members, hours and tax changes converge even on a dark LAN.
+                const connectivity = getConnectivityState();
+                if (this.businessId &&
+                    (!connectivity.isOnline || connectivity.isCloudReachable === "unreachable")) {
+                    void referenceSyncService
+                        .sync({ businessId: this.businessId })
+                        .catch((e) => syncLogger.warn("LocalNodeService", "LAN reference catch-up failed", { error: String(e) }));
+                }
             },
             onDisconnected: () => {
                 this.settleDial(node.deviceId);

package/dist/offline/random.d.ts

@@ -0,0 +1,3 @@
+/** Shared secure-random provider for offline keys, nonces and PIN salts. */
+export declare function setOfflineRandomBytesProvider(next: ((length: number) => Uint8Array) | null): void;
+export declare function offlineRandomBytes(length: number): Uint8Array;

package/dist/offline/random.js

@@ -0,0 +1,14 @@
+/** Shared secure-random provider for offline keys, nonces and PIN salts. */
+let provider = null;
+export function setOfflineRandomBytesProvider(next) {
+    provider = next;
+}
+export function offlineRandomBytes(length) {
+    if (provider)
+        return provider(length);
+    const cryptoObj = globalThis.crypto;
+    if (cryptoObj?.getRandomValues) {
+        return cryptoObj.getRandomValues(new Uint8Array(length));
+    }
+    throw new Error("No secure random source available. Call setOfflineRandomBytesProvider().");
+}

package/dist/offline/service.d.ts

@@ -34,7 +34,6 @@ export interface OfflineSessionState {
     keyId: string | null;
     members: OfflineMemberCredential[];
 }
-export declare function setOfflineRandomBytesProvider(provider: ((length: number) => Uint8Array) | null): void;
 /**
  * First-time activation. Generates the device keypair, registers the public
  * key, stores the signed license and enrolls the current member's PIN.

package/dist/offline/service.js

@@ -9,20 +9,11 @@ import { getAppInstanceIdAsync } from "../adapters/devices";
 import { getHttpClient } from "../adapters/http";
 import { getAuthToken } from "../adapters/auth";
 import { syncLogger } from "../utils/sync-logger";
+import { offlineRandomBytes } from "./random";
 import { base64UrlDecode, base64UrlEncode, canonicalDeviceChallenge, decodeLicensePayload, evaluateOfflineLicense, generateOfflineDeviceKeypair, loadAndVerifyOfflineLicense, newOfflineNonce, signDeviceChallenge, verifyOfflineLicense, } from "./license";
 import { clearOfflineDevice, createOfflineMemberCredential, getDevicePrivateKey, getOfflineMember, getStoredLicense, getStoredLicenseKeyId, getStoredLicensePublicKey, listOfflineMembers, markOfflineMemberLogin, removeOfflineMember, saveDevicePrivateKey, saveStoredLicense, saveStoredLicenseKeyId, saveStoredLicensePublicKey, verifyOfflineMemberPin, } from "./store";
-let randomBytesProvider = null;
-export function setOfflineRandomBytesProvider(provider) {
-    randomBytesProvider = provider;
-}
 function randomBytes(length) {
-    if (randomBytesProvider)
-        return randomBytesProvider(length);
-    const cryptoObj = globalThis.crypto;
-    if (cryptoObj?.getRandomValues) {
-        return cryptoObj.getRandomValues(new Uint8Array(length));
-    }
-    throw new Error("No secure random source available. Call setOfflineRandomBytesProvider().");
+    return offlineRandomBytes(length);
 }
 async function getPrivateKeyBytes() {
     const encoded = await getDevicePrivateKey();

package/dist/offline/store.js

@@ -10,6 +10,7 @@
  */
 import { getItem, removeItem, setItem } from "../adapters/kv";
 import { sha256Hex } from "../reference/entitlement-crypto";
+import { offlineRandomBytes } from "./random";
 export const OFFLINE_STORAGE_KEYS = {
     LICENSE: "offline:license",
     PUBLIC_KEY: "offline:license:public_key",
@@ -88,12 +89,11 @@ export async function clearOfflineDevice() {
 }
 const PIN_ROUNDS = 20000;
 function randomHex(length) {
-    const alphabet = "0123456789abcdef";
+    const bytes = offlineRandomBytes(Math.ceil(length / 2));
     let out = "";
-    for (let i = 0; i < length; i++) {
-        out += alphabet[Math.floor(Math.random() * alphabet.length)];
-    }
-    return out;
+    for (let i = 0; i < bytes.length; i++)
+        out += bytes[i].toString(16).padStart(2, "0");
+    return out.slice(0, length);
 }
 async function hashPin(pin, salt) {
     let digest = `${salt}:${pin}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@teincfood/core",
-  "version": "0.10.0",
+  "version": "0.10.2",
   "description": "TeincFood shared offline-first core — types, sync engine, local DB, reference data, and repositories for mobile + desktop",
   "type": "module",
   "main": "dist/index.js",