I think you've got it spot on.

I've also worked on systems like that where a mobile user could loose connection at any time and they are indeed very complex to get right.

I'm not sure there's a perfect way to do it but we ended having have certain functions that had to be done online and others where the user built a "request" for service that was handled optimistically with failures sent to the user's inbox later.