@teincfood/core 0.10.6 → 0.10.7

package/dist/offline/store.js

@@ -204,8 +204,9 @@ export async function createOfflineMemberCredential(args) {
 export const OFFLINE_PIN_MAX_ATTEMPTS = 5;
 export async function getOfflinePinLockState(userId, businessId) {
     const member = await getOfflineMember(userId, businessId);
-    const failedAttempts = member?.failed_attempts ?? 0;
-    const lockedUntil = member?.locked_until ?? null;
+    const lockExpired = Boolean(member?.locked_until && new Date(member.locked_until).getTime() <= Date.now());
+    const failedAttempts = lockExpired ? 0 : member?.failed_attempts ?? 0;
+    const lockedUntil = lockExpired ? null : member?.locked_until ?? null;
     const locked = Boolean(lockedUntil && new Date(lockedUntil).getTime() > Date.now());
     return {
         failedAttempts,
@@ -215,12 +216,16 @@ export async function getOfflinePinLockState(userId, businessId) {
     };
 }
 export async function verifyOfflineMemberPin(userId, pin, businessId) {
-    const member = await getOfflineMember(userId, businessId);
-    if (!member)
+    const stored = await getOfflineMember(userId, businessId);
+    if (!stored)
         return false;
-    if (member.locked_until && new Date(member.locked_until).getTime() > Date.now()) {
+    if (stored.locked_until && new Date(stored.locked_until).getTime() > Date.now()) {
         return false;
     }
+    // An expired cooldown grants a fresh set of attempts.
+    const member = stored.locked_until && new Date(stored.locked_until).getTime() <= Date.now()
+        ? { ...stored, failed_attempts: 0, locked_until: null }
+        : stored;
     if (!/^\d{6}$/.test(pin)) {
         await recordFailedPinAttempt(member);
         return false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@teincfood/core",
-  "version": "0.10.6",
+  "version": "0.10.7",
   "description": "TeincFood shared offline-first core — types, sync engine, local DB, reference data, and repositories for mobile + desktop",
   "type": "module",
   "main": "dist/index.js",