mnfst 0.5.142 → 0.5.143

package/lib/manifest.appwrite.auth.js

@@ -5382,14 +5382,9 @@ function initializeTeamsConvenience() {
                     const allRoles = this.allTeamRoles({ $id: teamId });
                     const permissions = allRoles && allRoles[roleName] ? [...allRoles[roleName]] : [];
 
-                    // Ensure allAvailablePermissions is populated (for dropdown)
-                    if (!this.allAvailablePermissions || this.allAvailablePermissions.length === 0) {
-                        if (this.getAllAvailablePermissions) {
-                            await this.getAllAvailablePermissions(teamId);
-                        }
-                    }
-
-                    // Set editing state
+                    // Set editing state SYNCHRONOUSLY — before the async dropdown fetch
+                    // below — so a caller that mutates editingRole.permissions immediately
+                    // after this isn't racing (and getting overwritten by) that fetch.
                     this.editingRole = {
                         teamId: teamId,
                         oldRoleName: roleName,
@@ -5397,10 +5392,46 @@ function initializeTeamsConvenience() {
                         permissions: permissions
                     };
 
+                    // Ensure allAvailablePermissions is populated (for dropdown)
+                    if (!this.allAvailablePermissions || this.allAvailablePermissions.length === 0) {
+                        if (this.getAllAvailablePermissions) {
+                            await this.getAllAvailablePermissions(teamId);
+                        }
+                    }
+
                     // Don't modify newRolePermissions when editing existing roles - that's only for new role creation
                     // The UI will use editingRole.permissions or pendingPermissions for existing roles
                 };
 
+                // Reactive-safe role-permission write. Takes a plain array and persists
+                // straight to team prefs via updateUserRole — WITHOUT going through the
+                // reactive editingRole object. Use this for programmatic edits; mutating
+                // $auth.editingRole.permissions directly is fragile under Alpine (the
+                // $auth proxy wraps the already-reactive editingRole and can recurse on
+                // get). updateUserRole refreshes the role cache, so allTeamRoles() re-reads.
+                store.updateRolePermissions = async function (teamId, roleName, permissions) {
+                    if (!this.updateUserRole) {
+                        return { success: false, error: 'Roles module not ready' };
+                    }
+                    const plain = Array.isArray(permissions)
+                        ? permissions.filter(p => p && typeof p === 'string')
+                        : [];
+                    return await this.updateUserRole(teamId, roleName, plain);
+                };
+
+                // Safely set the permissions on the in-progress edit (replaces editingRole
+                // with a fresh object holding a plain array, rather than mutating the
+                // reactive nested array). Pair with saveEditingRole().
+                store.setEditingPermissions = function (permissions) {
+                    if (!this.editingRole) {
+                        return;
+                    }
+                    const plain = Array.isArray(permissions)
+                        ? permissions.filter(p => p && typeof p === 'string')
+                        : [];
+                    this.editingRole = { ...this.editingRole, permissions: plain };
+                };
+
                 store.cancelEditingRole = function () {
                     this.editingRole = null;
                     this.newRolePermissions = [];

package/lib/manifest.integrity.json

@@ -1,5 +1,5 @@
 {
-  "manifest.appwrite.auth.js": "sha384-csLm/3JlkttPwGqBckmHytoiYWDSVheBwg/7G8dN2S8ebEhAHAG95W2qDPIGiHYO",
+  "manifest.appwrite.auth.js": "sha384-9XC7lR7xBSDktRSQ2OVjcDOZ5NT3IPzdfmGO3Rv4x37uAvrzfi20xER0Renn5MTj",
   "manifest.appwrite.data.js": "sha384-00ulLT+GAIuPHA/rRT9p98vYlsyDzkyKXtg86BDQ6FGQa5vVVN+W6kuforniBAsz",
   "manifest.appwrite.presence.js": "sha384-uxRpx9/Jj0kGtklH5QmUlAzD3zdSvFRfK6bcJQqxl+Bsf5tOo4zgwqJTQgtZoHQP",
   "manifest.charts.js": "sha384-RuV7gWXt3s+JegxWgDieR/P5U99sbOYWiYHdJGe2uCJjDFU1cPp0mJ1QT55ec9uz",

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "mnfst",
-    "version": "0.5.142",
+    "version": "0.5.143",
     "private": false,
     "workspaces": [
         "templates/starter",