@teincfood/core 0.10.5 → 0.10.7

package/dist/offline/store.js

@@ -204,8 +204,9 @@ export async function createOfflineMemberCredential(args) {
 export const OFFLINE_PIN_MAX_ATTEMPTS = 5;
 export async function getOfflinePinLockState(userId, businessId) {
     const member = await getOfflineMember(userId, businessId);
-    const failedAttempts = member?.failed_attempts ?? 0;
-    const lockedUntil = member?.locked_until ?? null;
+    const lockExpired = Boolean(member?.locked_until && new Date(member.locked_until).getTime() <= Date.now());
+    const failedAttempts = lockExpired ? 0 : member?.failed_attempts ?? 0;
+    const lockedUntil = lockExpired ? null : member?.locked_until ?? null;
     const locked = Boolean(lockedUntil && new Date(lockedUntil).getTime() > Date.now());
     return {
         failedAttempts,
@@ -215,12 +216,16 @@ export async function getOfflinePinLockState(userId, businessId) {
     };
 }
 export async function verifyOfflineMemberPin(userId, pin, businessId) {
-    const member = await getOfflineMember(userId, businessId);
-    if (!member)
+    const stored = await getOfflineMember(userId, businessId);
+    if (!stored)
         return false;
-    if (member.locked_until && new Date(member.locked_until).getTime() > Date.now()) {
+    if (stored.locked_until && new Date(stored.locked_until).getTime() > Date.now()) {
         return false;
     }
+    // An expired cooldown grants a fresh set of attempts.
+    const member = stored.locked_until && new Date(stored.locked_until).getTime() <= Date.now()
+        ? { ...stored, failed_attempts: 0, locked_until: null }
+        : stored;
     if (!/^\d{6}$/.test(pin)) {
         await recordFailedPinAttempt(member);
         return false;

package/dist/reference/service.js

@@ -469,16 +469,29 @@ class ReferenceSyncService {
             // have the bytes in its durable image cache. Fetch only missing keys.
             const peerConnectivity = getConnectivityState();
             if (!peerConnectivity.isOnline || peerConnectivity.isCloudReachable === "unreachable") {
+                const missing = [];
                 for (const url of urls) {
                     if (!url || !url.startsWith("http"))
                         continue;
                     if (await hasCachedImage(url))
                         continue;
-                    const asset = await requestAssetFromPeer(businessId, url);
-                    if (asset?.base64) {
-                        await cacheImageFromBase64(url, asset.base64);
-                    }
+                    missing.push(url);
                 }
+                // A menu can reference dozens of images. Keep peer transfers bounded so
+                // a dark-LAN catch-up does not serialize 15s timeouts.
+                const queue = [...missing];
+                const worker = async () => {
+                    for (;;) {
+                        const url = queue.shift();
+                        if (!url)
+                            return;
+                        const asset = await requestAssetFromPeer(businessId, url);
+                        if (asset?.base64) {
+                            await cacheImageFromBase64(url, asset.base64);
+                        }
+                    }
+                };
+                await Promise.all(Array.from({ length: Math.min(3, queue.length) }, worker));
             }
             await pruneImageCache(urls);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@teincfood/core",
-  "version": "0.10.5",
+  "version": "0.10.7",
   "description": "TeincFood shared offline-first core — types, sync engine, local DB, reference data, and repositories for mobile + desktop",
   "type": "module",
   "main": "dist/index.js",