mnfst 0.5.130 → 0.5.132

package/lib/manifest.data.js

@@ -27,19 +27,38 @@ async function ensureManifest() {
     }
 }
 
-// Helper to interpolate environment variables
+// Interpolate ${VAR} placeholders in a string against window.env. Only
+// PUBLIC_-prefixed vars reach window.env (the mnfst-run dev server filters
+// .env by that prefix to keep server-side secrets like MANIFEST_API_KEY out
+// of the browser). Misses warn once per name so a missing var doesn't fail
+// silently downstream as an empty URL / endpoint.
+const _warnedMissingEnv = new Set();
 function interpolateEnvVars(str) {
     if (typeof str !== 'string') return str;
     return str.replace(/\$\{([^}]+)\}/g, (match, varName) => {
-        // Check for environment variables (in browser, these would be set by build process)
         if (typeof process !== 'undefined' && process.env && process.env[varName]) {
             return process.env[varName];
         }
-        // Check for window.env (common pattern for client-side env vars)
         if (typeof window !== 'undefined' && window.env && window.env[varName]) {
             return window.env[varName];
         }
-        // Return original if not found
+        if (!_warnedMissingEnv.has(varName)) {
+            _warnedMissingEnv.add(varName);
+            if (!varName.startsWith('PUBLIC_')) {
+                console.warn(
+                    `[Manifest Data] data source references \${${varName}}, but only ` +
+                    `PUBLIC_-prefixed env vars are injected into window.env by mnfst-run. ` +
+                    `Rename to PUBLIC_${varName}, hardcode the value, or supply it via ` +
+                    `<script>window.env = {…}</script>. Leaving placeholder literal.`
+                );
+            } else {
+                console.warn(
+                    `[Manifest Data] data source references \${${varName}}, but it is not ` +
+                    `present in window.env. Add ${varName}=… to .env (read by mnfst-run) ` +
+                    `or set it via <script>window.env = {…}</script>. Leaving placeholder literal.`
+                );
+            }
+        }
         return match;
     });
 }

package/lib/manifest.integrity.json

@@ -7,7 +7,7 @@
   "manifest.color.js": "sha384-6Rv3LxyTcZNjrhtayQfqRdCx0uSZ4BiEbgEI98I62eTvp8Aw7LBIoNJ0Je1oktwL",
   "manifest.colorpicker.js": "sha384-Wqz0ZIbeIi7KarqqqSLsQk+7E/fMaKhb32hrq5/eWzX1yjqMrpPZKH8y+jZ3mfg+",
   "manifest.components.js": "sha384-73CB1A+LAGfNexkd7aT69APFSHMzix8irse9uzOkYehHHio4px3oR8JHJeaMH+jI",
-  "manifest.data.js": "sha384-PZiaRsDV4nnRGvmT8y2jEZV+BolcEZGJXbMJU75YqWGXI8b3y/L93zhhllovf4Go",
+  "manifest.data.js": "sha384-QboSuKhQfNy6Z1iBLho+92jqAnJyEj7u3FFTiH6McSgErKKCiJwlApMjSFCwYWL4",
   "manifest.datepicker.js": "sha384-NEb/H4vuR3CFtRcodHsm3jJjrcYW2JMpDlQKlgwTrzpMMTcDkFKYXzAYJD0gZ7Ov",
   "manifest.dropdowns.js": "sha384-9vRdtkgheqvl/2PEaAFJhQ/NCqrRO8NFOjCBNKSu1CDA+RXkIbUNBIZRST96asLe",
   "manifest.export.js": "sha384-RsTGzsPCBw3yO4+TdAGd4F+o3FnzUNlqnMBqtnn/kUfv7axpzRdPc2AnsExV/93c",
@@ -25,6 +25,6 @@
   "manifest.toasts.js": "sha384-ytd5rDbax/Ou9z23uedFXPZbxDPsk2E/pxCTq4WLvfv+os1qTI6kELp0kPp07g24",
   "manifest.tooltips.js": "sha384-GaBa+oORH0y6LC0NyLy+RjAyh1pRglud0U5oZKZAQEaYSsrm/G0ir+RUNSnW0Geb",
   "manifest.url.parameters.js": "sha384-FIufiClqDx1rJpU/QUc9z/D43qClQ6Qm8rBahipbJl9BDHUvhrOsUDegmTWW7Tuf",
-  "manifest.utilities.js": "sha384-o6LAk/jJGclXUpC6nzReSRCaAVxaMrgAMhCNYCLz/H4HNdITpmmWk25Fzag4GSHI",
-  "manifest.js": "sha384-LosPV9wWLItaJan0+SjFzLGe3W2kVRORdy+gpr6YkQ7AKJkasmtAf6rbbvk3G37O"
+  "manifest.utilities.js": "sha384-Hl2tlhHgIJLEr3CFiEq79nlWCgx6nSVJCyThPCZi3wOFBLv/KXm/VrIZ0vRZqBi7",
+  "manifest.js": "sha384-vc0GN2LMS0zDdT2Oj4a7NwyR498zKDgyiLiBl4VjDFJB+XDMcrdBRBBY5yn7ixXK"
 }

package/lib/manifest.js

@@ -586,14 +586,38 @@
 		// the loader rather than borrowed from the data plugin because the
 		// data plugin's script may not have finished executing yet at the
 		// point we cache the manifest. window.env is populated by either
-		// the mnfst-run dev server (which reads .env at startup) or a
-		// developer-supplied <script>window.env = {…}</script> block.
+		// the mnfst-run dev server (which reads PUBLIC_-prefixed vars from
+		// .env at startup) or a developer-supplied
+		// <script>window.env = {…}</script> block.
+		//
+		// Misses are warned, not silently dropped: a missing var almost
+		// always means the dev forgot the PUBLIC_ prefix or hasn't set the
+		// var at all, and an empty substitution downstream (e.g. an empty
+		// API URL) tends to fail far from the cause.
+		const warnedMissingEnv = new Set();
 		const interpolateManifestEnv = (obj) => {
 			if (obj === null || typeof obj !== 'object') return;
 			const subst = (str) => str.replace(/\$\{([^}]+)\}/g, (m, name) => {
 				if (typeof window !== 'undefined' && window.env && window.env[name] !== undefined) {
 					return window.env[name];
 				}
+				if (!warnedMissingEnv.has(name)) {
+					warnedMissingEnv.add(name);
+					if (!name.startsWith('PUBLIC_')) {
+						console.warn(
+							`[Manifest] manifest.json references \${${name}}, but only PUBLIC_-prefixed ` +
+							`env vars are injected into window.env by mnfst-run. Rename to ` +
+							`PUBLIC_${name}, hardcode the value, or supply it via ` +
+							`<script>window.env = {…}</script>. Leaving placeholder literal.`
+						);
+					} else {
+						console.warn(
+							`[Manifest] manifest.json references \${${name}}, but it is not present ` +
+							`in window.env. Add ${name}=… to .env (read by mnfst-run) or ` +
+							`set it via <script>window.env = {…}</script>. Leaving placeholder literal.`
+						);
+					}
+				}
 				return m;
 			});
 			const walk = (o) => {

package/lib/manifest.utilities.js

@@ -3525,6 +3525,37 @@ function detectOS() {
 }
 detectOS();
 
+// Register the device/OS variants with Tailwind too. The Manifest compiler
+// applies these variants to its own theme-derived/semantic utilities, but
+// standard Tailwind utilities (px-4, flex, …) are emitted by Tailwind's own
+// engine, which only knows its built-in variants. A `<style type="text/tailwindcss">`
+// carrying @custom-variant definitions teaches Tailwind the same variants, so
+// touch:px-4 / mac:flex / cursor:gap-2 resolve like sm:/hover:. Tailwind's
+// browser build reprocesses when this style is added, so load order is moot.
+function injectTailwindVariants() {
+    try {
+        if (document.getElementById('manifest-tailwind-variants')) return;
+        const style = document.createElement('style');
+        style.id = 'manifest-tailwind-variants';
+        style.setAttribute('type', 'text/tailwindcss');
+        style.textContent = [
+            '@custom-variant touch (@media (pointer: coarse));',
+            '@custom-variant cursor (@media (pointer: fine) and (hover: hover));',
+            '@custom-variant pointer (@media (any-pointer: fine));',
+            '@custom-variant mac (&:where([data-os="macos"] *));',
+            '@custom-variant windows (&:where([data-os="windows"] *));',
+            '@custom-variant linux (&:where([data-os="linux"] *));',
+            '@custom-variant ios (&:where([data-os="ios"] *));',
+            '@custom-variant android (&:where([data-os="android"] *));',
+            '@custom-variant apple (&:where([data-os="macos"] *, [data-os="ios"] *));'
+        ].join('\n');
+        (document.head || document.documentElement).appendChild(style);
+    } catch (e) {
+        // Non-fatal: Tailwind-utility variants simply won't be available.
+    }
+}
+injectTailwindVariants();
+
 // Initialize immediately without waiting for DOMContentLoaded
 const compiler = new TailwindCompiler();
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "mnfst",
-    "version": "0.5.130",
+    "version": "0.5.132",
     "private": false,
     "workspaces": [
         "templates/starter",