mnfst-render 0.5.14 → 0.5.15

package/manifest.render.mjs

@@ -619,14 +619,20 @@ function stripDevOnlyContent(html) {
 // leaving it in place would cause Alpine to execute synchronously during HTML
 // parse, before plugins have a chance to register their directives.
 function stripInjectedPluginScripts(html) {
+  // Safety-net regex strip for any Manifest plugin scripts that survived the
+  // DOM-level removal in the Puppeteer evaluate phase.  Uses a broad pattern
+  // that matches ANY `manifest.*.js` or `manifest.*.min.js` script — no need
+  // to enumerate individual plugin names.  New plugins are covered automatically.
   const pluginPattern =
-    /<script[^>]*\ssrc=["'][^"']*manifest\.(?:components|router|utilities|data|icons|localization|markdown|code|themes|toasts|tooltips|dropdowns|tabs|slides|resize|colorpicker|tailwind|appwrite\.(?:auth|data|presence))[^"']*\.(?:min\.)?js["'][^>]*>\s*<\/script>/gi;
+    /<script[^>]*\ssrc=["'][^"']*manifest\.[a-z][\w.-]*\.(?:min\.)?js["'][^>]*>\s*<\/script>/gi;
   let out = html.replace(pluginPattern, '');
+  // Alpine (re-injected by the loader at runtime after plugin registration)
   const alpinePattern =
     /<script[^>]*\ssrc=["'][^"']*\/alpinejs@[^"']*["'][^>]*>\s*<\/script>/gi;
   out = out.replace(alpinePattern, '');
+  // Runtime library scripts loaded by plugins (yaml parser, markdown, etc.)
   const runtimePattern =
-    /<script[^>]*\ssrc=["'][^"']*(?:papaparse@[^"']*\/papaparse\.min\.js|marked\/marked\.min\.js|highlightjs\/cdn-release@[^"']*\/highlight\.min\.js)[^"']*["'][^>]*>\s*<\/script>/gi;
+    /<script[^>]*\ssrc=["'][^"']*(?:papaparse[^"']*\.min\.js|marked[^"']*\.min\.js|highlight[^"']*\.min\.js|js-yaml[^"']*\.min\.js)[^"']*["'][^>]*>\s*<\/script>/gi;
   out = out.replace(runtimePattern, '');
   return out;
 }
@@ -1993,6 +1999,22 @@ async function runPrerender(config) {
       // (`hydratePrerenderedPage` in manifest.js) reads the contract and
       // restores source attributes before Alpine starts.
       await page.evaluateOnNewDocument(() => {
+        // Snapshot the script srcs that exist in the author's original HTML
+        // BEFORE any loader/plugin injects additional scripts.  Used later to
+        // strip runtime-injected scripts from the serialized output while
+        // keeping author-intentional ones (analytics, third-party widgets, etc.).
+        window.__manifestOriginalScriptSrcs = new Set();
+        const _snapScripts = () => {
+          document.querySelectorAll('script[src]').forEach(s => {
+            window.__manifestOriginalScriptSrcs.add(s.getAttribute('src'));
+          });
+        };
+        if (document.readyState === 'loading') {
+          document.addEventListener('DOMContentLoaded', _snapScripts, { once: true });
+        }
+        // Also snap immediately for any scripts already parsed
+        _snapScripts();
+
         // element -> { attrName: originalValue (null if attribute was absent) }
         // Keyed by reference so detached elements drop out naturally.
         const sourceAttrs = new Map();
@@ -2722,13 +2744,14 @@ async function runPrerender(config) {
         runBatch(() => {
           document.querySelectorAll('template[x-for][data-prerender-static-generated="1"]').forEach((tpl) => {
             if (tpl.hasAttribute('data-hydrate') || tpl.closest('[data-hydrate]')) return;
-            // Keep templates whose x-for iterates over $x data — these are data-driven
-            // lists that need Alpine to re-render at runtime (e.g. for locale changes,
-            // filtering).  Remove the STATIC CLONES so Alpine's re-render from the
-            // template doesn't produce duplicates, but the template itself stays.
+            // $x-driven x-for: keep the template so Alpine can re-render the
+            // list at runtime (locale switching, filtering, etc.), but remove
+            // the static clones — Alpine creates fresh clones on init and does
+            // NOT adopt existing DOM nodes, so leaving them produces duplicates.
+            // Individual article/pricing pages still have full baked content
+            // (via x-text/x-html); the x-for list is only the index/grid view.
             const xFor = (tpl.getAttribute('x-for') || '');
             if (xFor.includes('$x')) {
-              // Remove static clones (siblings with same tag+class as template's first child)
               const first = tpl.content?.firstElementChild;
               if (first) {
                 const tag = first.tagName;
@@ -2834,6 +2857,20 @@ async function runPrerender(config) {
         toRemove.forEach((el) => { if (document.contains(el)) el.remove(); });
       });
 
+      // Remove scripts that were injected at runtime (by the loader, plugins,
+      // or third-party libraries) but were NOT in the author's original HTML.
+      // This is done in the browser context (before serialization) so the
+      // removal is permanent in the captured outerHTML.  The approach is
+      // future-proof: new plugins and arbitrary third-party scripts are handled
+      // automatically without updating a hardcoded allowlist.
+      await page.evaluate(() => {
+        const originals = window.__manifestOriginalScriptSrcs || new Set();
+        document.querySelectorAll('script[src]').forEach(s => {
+          const src = s.getAttribute('src');
+          if (src && !originals.has(src)) s.remove();
+        });
+      });
+
       let html = await page.evaluate(() => document.documentElement.outerHTML);
       // Inject the hydration contract blob into the raw HTML *before* caching
       // it for locale variant generation, so every locale variant inherits the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mnfst-render",
-  "version": "0.5.14",
+  "version": "0.5.15",
   "description": "Render Manifest sites to static HTML for SEO",
   "type": "module",
   "bin": {