@teincfood/core 0.10.25 → 0.10.26

package/dist/sync/offline-capable.js

@@ -24,61 +24,73 @@ import { applyMenuCommandLocal } from "../reference/menu-apply";
 import { emitReferenceChanged } from "../reference/events";
 import { assertEntitledForCommand } from "../reference/entitlement-guard";
 import { isOnlineCapable } from "./online-gates";
+/**
+ * Enforce the cached RBAC capabilities downloaded from the backend.
+ *
+ * Fail-open only when no capabilities record exists yet (first boot); once a
+ * record is present, an unknown capability is a real denial and must never
+ * reach the local cache or the outbox.
+ */
+async function assertCachedCapability(businessId, required) {
+    try {
+        const db = await openSyncDatabase();
+        const rec = await getReferenceData(db, businessId, "capabilities");
+        const caps = rec?.payload?.data
+            ?.capabilities ?? [];
+        if (rec && caps.length > 0 && !caps.includes(required)) {
+            throw new ApiError(`Missing capability: ${required}`, 403, "FORBIDDEN");
+        }
+    }
+    catch (e) {
+        if (e instanceof ApiError && e.status === 403)
+            throw e;
+    }
+}
 export async function runOfflineCapableMutation(options) {
-    // Per-command capability guard before even attempting direct call
+    // Online-required gate first: these commands can never succeed offline —
+    // throw loud immediately instead of queuing what no transport can fulfill.
+    assertOnlineFor(options.commandType, options.payload);
+    // Per-command capability guard before touching local state or the network.
     const required = CAPABILITY_BY_COMMAND[options.commandType];
-    if (required) {
-        // Online-required gate first: these commands can never succeed offline —
-        // throw loud immediately instead of queuing what no transport can fulfill.
-        assertOnlineFor(options.commandType, options.payload);
-        // Local-first for engine-routed domains (menu:*): persist to SQLite and the
-        // durable outbox immediately, update the local reference cache, and let
-        // replay upload to the cloud/LAN in the background. A slow or absent
-        // network must never hold the form open.
-        if (options.commandType.startsWith("menu:")) {
-            // Preserve the entitlement gate that the engine normally applies before
-            // queueing: local-first must not weaken subscription enforcement.
-            await assertEntitledForCommand(options.businessId, options.commandType);
-            const command = buildCommand({
-                commandType: options.commandType,
-                businessId: options.businessId,
-                entityId: options.entityId,
-                payload: options.payload,
+    // Local-first for engine-routed domains (menu:*): persist to SQLite and the
+    // durable outbox immediately, update the local reference cache, and let
+    // replay upload to the cloud/LAN in the background. A slow or absent
+    // network must never hold the form open.
+    if (options.commandType.startsWith("menu:")) {
+        if (required)
+            await assertCachedCapability(options.businessId, required);
+        // Preserve the entitlement gate that the engine normally applies before
+        // queueing: local-first must not weaken subscription enforcement.
+        await assertEntitledForCommand(options.businessId, options.commandType);
+        const command = buildCommand({
+            commandType: options.commandType,
+            businessId: options.businessId,
+            entityId: options.entityId,
+            payload: options.payload,
+        });
+        try {
+            const { keys } = await applyMenuCommandLocal(options.businessId, command);
+            if (keys.length)
+                emitReferenceChanged(options.businessId, keys);
+        }
+        catch (error) {
+            syncLogger.debug("OfflineCapable", "menu local apply failed", {
+                error: String(error),
             });
-            try {
-                const { keys } = await applyMenuCommandLocal(options.businessId, command);
-                if (keys.length)
-                    emitReferenceChanged(options.businessId, keys);
-            }
-            catch (error) {
-                syncLogger.debug("OfflineCapable", "menu local apply failed", {
+        }
+        const event = await commandQueueService.enqueue(command);
+        if (isOnlineCapable()) {
+            // Background only: save must return now.
+            void syncEngine.replayQueuedCommands().catch((error) => {
+                syncLogger.debug("OfflineCapable", "menu background replay failed", {
                     error: String(error),
                 });
-            }
-            const event = await commandQueueService.enqueue(command);
-            if (isOnlineCapable()) {
-                // Background only: save must return now.
-                void syncEngine.replayQueuedCommands().catch((error) => {
-                    syncLogger.debug("OfflineCapable", "menu background replay failed", {
-                        error: String(error),
-                    });
-                });
-            }
-            return event.payload;
-        }
-        try {
-            const db = await openSyncDatabase();
-            const rec = await getReferenceData(db, options.businessId, "capabilities");
-            const caps = rec?.payload?.data?.capabilities ?? [];
-            if (rec && caps.length > 0 && !caps.includes(required)) {
-                throw new ApiError(`Missing capability: ${required}`, 403, "FORBIDDEN");
-            }
-        }
-        catch (e) {
-            if (e instanceof ApiError && e.status === 403)
-                throw e;
+            });
         }
+        return event.payload;
     }
+    if (required)
+        await assertCachedCapability(options.businessId, required);
     try {
         // Cloud already known unreachable (or no network): skip the direct REST
         // attempt entirely — it would only burn a timeout before falling back.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@teincfood/core",
-  "version": "0.10.25",
+  "version": "0.10.26",
   "description": "TeincFood shared offline-first core — types, sync engine, local DB, reference data, and repositories for mobile + desktop",
   "type": "module",
   "main": "dist/index.js",