mnfst 0.5.143 → 0.5.144

package/lib/manifest.appwrite.auth.js

@@ -5525,29 +5525,43 @@ function initializeTeamsConvenience() {
                     return userRoles.includes('owner');
                 };
 
-                // Synchronous version for Alpine.js bindings (uses permission cache)
+                // Synchronous version for Alpine.js bindings (x-show / :disabled).
+                // Resolves from the cached role definitions (allTeamRoles) so it matches
+                // the async hasTeamPermission() — including custom permission keys, not
+                // just the six built-ins the permission cache pre-computes.
                 store.hasTeamPermissionSync = function (permission) {
                     if (!this.currentTeam || !this.currentTeamMemberships || !this.user) {
                         return false;
                     }
 
-                    // Use cached permissions if available (updated by updatePermissionCache)
-                    if (this._permissionCache && typeof this._permissionCache[permission] === 'boolean') {
-                        return this._permissionCache[permission];
+                    const userRoles = this.getCurrentTeamRoles();
+                    if (!Array.isArray(userRoles)) {
+                        return false;
                     }
 
-                    // Fallback: check if user has no custom roles (should have all permissions)
-                    // This matches the logic in hasPermission: if customRoles.length === 0, return true
-                    const userRoles = this.getCurrentTeamRoles();
-                    const customRoles = userRoles.filter(role => role !== 'owner');
+                    // The merged config + user-generated role map for the current team
+                    // (same map the async path resolves against), available synchronously.
+                    const allRoles = (this.allTeamRoles && this.allTeamRoles(this.currentTeam)) || {};
 
-                    // If user has no custom roles (only "owner" or empty), grant all permissions
-                    // This handles users with "No Role" who should have all owner permissions
+                    // No custom roles defined → owner has every permission.
+                    if (!allRoles || Object.keys(allRoles).length === 0) {
+                        return userRoles.includes('owner');
+                    }
+
+                    // User holds no custom role (only "owner" / empty) → all permissions.
+                    const customRoles = userRoles.filter(role => role !== 'owner');
                     if (customRoles.length === 0) {
                         return true;
                     }
 
-                    // If user has custom roles but cache is missing, return false (shouldn't happen if cache is working)
+                    // Granted if any of the user's custom roles includes this permission
+                    // (built-in or custom key).
+                    for (const roleName of customRoles) {
+                        const rolePermissions = allRoles[roleName];
+                        if (Array.isArray(rolePermissions) && rolePermissions.includes(permission)) {
+                            return true;
+                        }
+                    }
                     return false;
                 };
 

package/lib/manifest.integrity.json

@@ -1,5 +1,5 @@
 {
-  "manifest.appwrite.auth.js": "sha384-9XC7lR7xBSDktRSQ2OVjcDOZ5NT3IPzdfmGO3Rv4x37uAvrzfi20xER0Renn5MTj",
+  "manifest.appwrite.auth.js": "sha384-/IbcczrhhYWlsQFvFmHkulV1JPIBBFvMH513PwsnJo+D0F+YKhGJ1ig/UmJbGSe/",
   "manifest.appwrite.data.js": "sha384-00ulLT+GAIuPHA/rRT9p98vYlsyDzkyKXtg86BDQ6FGQa5vVVN+W6kuforniBAsz",
   "manifest.appwrite.presence.js": "sha384-uxRpx9/Jj0kGtklH5QmUlAzD3zdSvFRfK6bcJQqxl+Bsf5tOo4zgwqJTQgtZoHQP",
   "manifest.charts.js": "sha384-RuV7gWXt3s+JegxWgDieR/P5U99sbOYWiYHdJGe2uCJjDFU1cPp0mJ1QT55ec9uz",

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "mnfst",
-    "version": "0.5.143",
+    "version": "0.5.144",
     "private": false,
     "workspaces": [
         "templates/starter",