@teincfood/core 0.9.2 → 0.9.4

package/dist/index.d.ts

@@ -141,7 +141,7 @@ export { getSyncJobsPendingCount, debugDumpSyncJobs, drainPending } from "./sync
 export { performFullSync } from "./sync/full-sync";
 export { stopHealthProbe } from "./sync/health-probe";
 export { notifyAuthChanged, subscribeAuth } from "./adapters/auth";
-export { isAuthenticated, hasActiveBusiness, canBusinessSync } from "./sync/sync-guard";
+export { isAuthenticated, hasActiveBusiness, canBusinessSync, setOfflineSyncEnabled, isOfflineSyncEnabled } from "./sync/sync-guard";
 export { ACCESS_EXPIRED_CODE, SESSION_DEAD_CODES, SKIP_AUTH_RETRY, extractAuthFailure, isAccessExpired, isSessionDead, hasAuthRetrySkip, refreshSession, withAuthRetry, } from "./auth/session";
 export type { AuthFailure, SessionTokens } from "./auth/session";
 export { getCachedImagePath, ensureImageCacheDir, getCachedImageInfo, cacheRemoteImage, cacheImageBatch, clearImageCache, pruneImageCache, resolveImageSource, stableCacheUrl } from "./image-cache/service";

package/dist/index.js

@@ -156,7 +156,7 @@ export { getSyncJobsPendingCount, debugDumpSyncJobs, drainPending } from "./sync
 export { performFullSync } from "./sync/full-sync";
 export { stopHealthProbe } from "./sync/health-probe";
 export { notifyAuthChanged, subscribeAuth } from "./adapters/auth";
-export { isAuthenticated, hasActiveBusiness, canBusinessSync } from "./sync/sync-guard";
+export { isAuthenticated, hasActiveBusiness, canBusinessSync, setOfflineSyncEnabled, isOfflineSyncEnabled } from "./sync/sync-guard";
 // ── Session lifecycle (access-expired → refresh → refresh-expired → logout)
 export { ACCESS_EXPIRED_CODE, SESSION_DEAD_CODES, SKIP_AUTH_RETRY, extractAuthFailure, isAccessExpired, isSessionDead, hasAuthRetrySkip, refreshSession, withAuthRetry, } from "./auth/session";
 // ── Image cache (durable) ──

package/dist/sync/command-queue.service.js

@@ -13,6 +13,7 @@ import { insertCommand, getPendingCommands, markCommandInFlight, updateCommandSt
 import { syncLogger } from "../utils/sync-logger";
 import { recordAttempt } from "../utils/attempt-stats";
 import { TransitionError, isReplayDeferred, TRANSITION_ERROR_CODES } from "./transition-errors";
+import { assertBusinessOpenForCreate } from "../utils/business-hours";
 import { extractApiErrorCode } from "../utils/error";
 import { generateEventId } from "../utils/uuid";
 import { generateLocalCalloutNumber, generateOrderNumberForBusiness, generateOrderNumber, } from "./order-number";
@@ -203,6 +204,14 @@ class CommandQueueService {
      * Returns an optimistic domain event so the caller can update the UI.
      */
     async enqueue(command) {
+        // Queue-time hours gate: a closed business can never legally sync an
+        // order:create, so fail fast with BusinessHoursError instead of queuing
+        // an optimistic order that would sit pending forever. Other command
+        // types (transitions, payments, delivery) are unaffected so in-progress
+        // orders can still be completed while closed.
+        if (command.command_type === "order:create") {
+            await assertBusinessOpenForCreate(command.business_id);
+        }
         const db = getSyncDatabase();
         const preparedCommand = injectLocalOrderNumber(command);
         await insertCommand(db, { command: preparedCommand, status: "pending" });

package/dist/sync/engine.js

@@ -149,6 +149,20 @@ export class SyncEngine {
                 return events;
             }
             catch (error) {
+                // Definitive hours-guard rejection (thrown by createLocalOrder before
+                // any HTTP): the business is closed. Surface it immediately — do not
+                // mark cloud unreachable and do not fall back to the outbox, which
+                // would either re-throw from the enqueue gate or mask a real decision
+                // as a connectivity problem.
+                const code = errorCodeOf(error);
+                if (code === "BUSINESS_CLOSED" || code === "HOURS_NOT_SYNCED") {
+                    syncLogger.warn("SyncEngine", "Command blocked: business closed", {
+                        command_type: command.command_type,
+                        command_id: command.command_id,
+                        code,
+                    });
+                    throw error;
+                }
                 // Definitive server rejection (4xx): the backend answered with a real
                 // decision (e.g. INVALID_TRANSITION, PAYMENT_REQUIRED, FORBIDDEN).
                 // Surface it instead of masking it as a connectivity problem and
@@ -159,7 +173,6 @@ export class SyncEngine {
                     ? error.status
                     : undefined;
                 if (rejectionStatus !== undefined && rejectionStatus >= 400 && rejectionStatus < 500) {
-                    const code = errorCodeOf(error);
                     syncLogger.warn("SyncEngine", "Cloud command rejected by server", {
                         command_type: command.command_type,
                         command_id: command.command_id,

package/dist/sync/sync-guard.d.ts

@@ -7,10 +7,13 @@
  * the user has logged in and a business is selected. User-scoped queries
  * (invitations, fleet) gate on auth only.
  */
+export declare function setOfflineSyncEnabled(enabled: boolean): void;
+export declare function isOfflineSyncEnabled(): boolean;
 export declare function isAuthenticated(): boolean;
 export declare function hasActiveBusiness(): boolean;
 /**
- * Business sync may run only when both authenticated and a business is selected.
+ * Business sync may run only when offline sync is enabled for the role,
+ * authenticated and a business is selected.
  * Pass an explicit `businessId` to test that specific id; otherwise reads
  * the active business store.
  */

package/dist/sync/sync-guard.js

@@ -9,6 +9,17 @@
  */
 import { getAuthToken } from "../adapters/auth";
 import { getActiveBusiness } from "../adapters/business";
+// Offline machinery (reference sync, drains, pulls, leases) runs for the
+// seller role only. Fleet managers and riders are fully online: the app
+// disables this flag on role change, which funnels through canBusinessSync
+// and stops every business sync path at once.
+let offlineSyncEnabled = true;
+export function setOfflineSyncEnabled(enabled) {
+    offlineSyncEnabled = enabled;
+}
+export function isOfflineSyncEnabled() {
+    return offlineSyncEnabled;
+}
 export function isAuthenticated() {
     return !!getAuthToken();
 }
@@ -16,11 +27,14 @@ export function hasActiveBusiness() {
     return !!getActiveBusiness()?.id;
 }
 /**
- * Business sync may run only when both authenticated and a business is selected.
+ * Business sync may run only when offline sync is enabled for the role,
+ * authenticated and a business is selected.
  * Pass an explicit `businessId` to test that specific id; otherwise reads
  * the active business store.
  */
 export function canBusinessSync(businessId) {
+    if (!offlineSyncEnabled)
+        return false;
     const bid = businessId ?? getActiveBusiness()?.id;
     return !!bid && !!getAuthToken();
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@teincfood/core",
-  "version": "0.9.2",
+  "version": "0.9.4",
   "description": "TeincFood shared offline-first core — types, sync engine, local DB, reference data, and repositories for mobile + desktop",
   "type": "module",
   "main": "dist/index.js",