Local-first and shop separated
- Sales and stock keep working from the on-device database during internet interruptions.
- Each shop's local records are stored in a separate tenant scope to prevent account mixing.
- Sign-in session secrets use Windows-protected storage where the operating system supports it.
- Queued changes sync in the background when a stable connection returns.