What belongs in an offline-first command queue for device control?

An offline-first command queue should hold idempotent commands with client-generated IDs, expiry, and visible pending state. Merge repeated setting changes before sending, but never silently drop safety actions. For a pump controller, a queued speed change can expire after ten minutes, while an emergency stop must block or require acknowledgement.