mnfst 0.5.226 → 0.5.228

package/lib/manifest.appwrite.auth.js

@@ -303,14 +303,13 @@ function initializeAuthStore() {
                     // Identity ended or changed in another tab: scoped data must drop this tab's rows
                     const nextId = state.isAuthenticated ? (state.user?.$id || null) : null;
                     if (prevId && nextId !== prevId) {
-                        if (!nextId) {
-                            store.teams = [];
-                            store.currentTeam = null;
-                        }
+                        store._resetTeamsState();
                         window.dispatchEvent(new CustomEvent('manifest:auth:session-cleared'));
+                        if (nextId) store._adoptCrossTabTeams(nextId);
                     } else if (nextId && !wasAuthenticated) {
                         // Signed in from another tab: this tab's identity-bound data reloads
                         window.dispatchEvent(new CustomEvent(state.isAnonymous ? 'manifest:auth:anonymous' : 'manifest:auth:login', { detail: { user: state.user, crossTab: true } }));
+                        store._adoptCrossTabTeams(nextId);
                     }
                 }
             } catch (error) {
@@ -405,6 +404,8 @@ function initializeAuthStore() {
         _guestManual: false,
         _signInPendingUntil: 0, // signed-out init with guest-auto or an auth callback still to sign in
         _sessionUnverified: false, // init could not reach Appwrite: signed out locally, never broadcast
+        _crossTabTeams: null, // latest cross-tab team load; older ones skip their writes
+        _teamsEpoch: 0, // bumped by every team reset; an in-flight listTeams from an older one is discarded
         _authEpoch: 0, // bumped by every identity change; an in-flight recheck from an older epoch is dropped
         _recheckTimer: null,
         _recheckAttempt: 0,
@@ -640,8 +641,9 @@ function initializeAuthStore() {
                 this._initialized = true;
                 this._initializing = false;
 
-                // Guest-auto / callback sign-in follows: scoped data holds instead of flashing signed-out
-                if (!this.isAuthenticated) {
+                // Guest-auto / callback sign-in follows: scoped data holds instead of flashing signed-out.
+                // Not while unverified: nothing signs in until Appwrite is reachable (the recheck handles it)
+                if (!this.isAuthenticated && !this._sessionUnverified) {
                     let callback = false;
                     try {
                         // Team invites need an existing session (acceptInvite refuses signed-out), so they don't sign in
@@ -665,10 +667,14 @@ function initializeAuthStore() {
             // manifest:auth:teams-loaded for anything needing the full set.
             if (appwriteConfig && this.isAuthenticated && appwriteConfig.teams
                 && (!this.isAnonymous || appwriteConfig.guestTeams)) {
+                const owner = this.user?.$id;
                 this._loadTeamsAndSeed(appwriteConfig)
-                    .then(() => window.dispatchEvent(new CustomEvent('manifest:auth:teams-loaded', {
-                        detail: { teams: this.teams, currentTeam: this.currentTeam }
-                    })))
+                    .then(() => {
+                        if (!this.isAuthenticated || this.user?.$id !== owner) return;
+                        window.dispatchEvent(new CustomEvent('manifest:auth:teams-loaded', {
+                            detail: { teams: this.teams, currentTeam: this.currentTeam }
+                        }));
+                    })
                     .catch(e => console.warn('[Manifest Appwrite Auth] Background team load failed:', e?.message || e));
             }
         },
@@ -774,9 +780,34 @@ function initializeAuthStore() {
             this.deletedTemplateTeams = [];
             this.deletedTemplateRoles = [];
             this._teamImmutableCache = {};
+            this._teamsEpoch++;
             if (this.stopTeamsRealtime) {
                 try { this.stopTeamsRealtime(); } catch (e) { /* ignore */ }
             }
+            if (this.stopTeamsPolling) {
+                try { this.stopTeamsPolling(); } catch (e) { /* ignore */ }
+            }
+        },
+
+        // Teams for an identity adopted from another tab. That tab seeds; this one
+        // only lists. A newer adoption or identity change supersedes this load.
+        _adoptCrossTabTeams(userId) {
+            const token = {};
+            this._crossTabTeams = token;
+            const current = () => this._crossTabTeams === token && this.isAuthenticated === true && this.user?.$id === userId;
+            (async () => {
+                try {
+                    const cfg = await config.getAppwriteConfig();
+                    if (!cfg?.teams || (this.isAnonymous && !cfg.guestTeams) || !current()) return;
+                    await this._loadTeamsAndSeed(cfg, { seed: false });
+                } catch (e) {
+                    console.warn('[Manifest Appwrite Auth] Cross-tab team load failed:', e?.message || e);
+                }
+                if (!current()) return;
+                window.dispatchEvent(new CustomEvent('manifest:auth:teams-loaded', {
+                    detail: { teams: this.teams, currentTeam: this.currentTeam }
+                }));
+            })();
         },
 
         // Call the deployed guest-migration function; the current session authenticates it.
@@ -801,14 +832,14 @@ function initializeAuthStore() {
 
         // Load the user's teams and seed configured defaults. Shared by the guest,
         // magic-link, OAuth, and init/restore paths.
-        async _loadTeamsAndSeed(appwriteConfig) {
+        async _loadTeamsAndSeed(appwriteConfig, { seed = true } = {}) {
             const cfg = appwriteConfig || await config.getAppwriteConfig();
             if (!cfg?.teams) {
                 return;
             }
             // Startup race: we can arrive before teams.core/defaults wire listTeams +
             // ensureDefaultTeams onto the store. Wait briefly rather than skip.
-            const needsSeed = !!(cfg.permanentTeams || cfg.templateTeams);
+            const needsSeed = seed && !!(cfg.permanentTeams || cfg.templateTeams);
             const ready = () => typeof this.listTeams === 'function'
                 && (!needsSeed || typeof window.ManifestAppwriteAuthTeamsDefaults?.ensureDefaultTeams === 'function');
             for (let i = 0; i < 40 && !ready(); i++) {
@@ -968,19 +999,8 @@ function initializeAuthStore() {
                 this.otpPhrase = null;
                 this._otpUserId = null;
 
-                // Stop teams realtime subscription if active
-                if (this.stopTeamsRealtime) {
-                    this.stopTeamsRealtime();
-                }
-
-                // Stop teams polling if active (fallback)
-                if (this.stopTeamsPolling) {
-                    this.stopTeamsPolling();
-                }
-
-                // Clear teams on logout
-                this.teams = [];
-                this.currentTeam = null;
+                // Clear teams (stops realtime/polling, discards in-flight lists)
+                this._resetTeamsState();
 
                 // Restore to guest state after logout (guest-auto only, and not when
                 // already a guest — don't mint a new guest on top).
@@ -1014,19 +1034,8 @@ function initializeAuthStore() {
                     this.user = null;
                     this.session = null;
                 }
-                // Stop teams realtime subscription if active
-                if (this.stopTeamsRealtime) {
-                    this.stopTeamsRealtime();
-                }
-
-                // Stop teams polling if active (fallback)
-                if (this.stopTeamsPolling) {
-                    this.stopTeamsPolling();
-                }
-
                 // Clear teams on logout error too
-                this.teams = [];
-                this.currentTeam = null;
+                this._resetTeamsState();
                 if (!this.isAuthenticated) this._clearIdentity();
                 // Expired session (401) is still a logout: scoped data must drop the old rows
                 syncStateToStorage(this);
@@ -1062,8 +1071,7 @@ function initializeAuthStore() {
                 this._oauthProvider = null;
 
                 // Clear teams
-                this.teams = [];
-                this.currentTeam = null;
+                this._resetTeamsState();
 
                 // Clear OAuth provider from storage
                 try {
@@ -1084,8 +1092,7 @@ function initializeAuthStore() {
                 this.session = null;
                 this.magicLinkSent = false;
                 this.magicLinkExpired = false;
-                this.teams = [];
-                this.currentTeam = null;
+                this._resetTeamsState();
                 syncStateToStorage(this);
                 window.dispatchEvent(new CustomEvent('manifest:auth:session-cleared'));
                 return { success: false, error: error.message };
@@ -1520,6 +1527,12 @@ function initializeTeamsCore() {
                     return { success: false, error: 'You must be signed in to list teams' };
                 }
 
+                // Answer for this identity only: a reset or identity change discards it
+                const owner = this.user?.$id || null;
+                const generation = this._teamsEpoch;
+                const stale = () => !this.isAuthenticated || (this.user?.$id || null) !== owner || this._teamsEpoch !== generation;
+                const discarded = { success: false, error: 'Identity changed during team load', stale: true };
+
                 try {
                     const params = {
                         queries: queries
@@ -1528,6 +1541,7 @@ function initializeTeamsCore() {
                         params.search = search;
                     }
                     const result = await this._appwrite.teams.list(params);
+                    if (stale()) return discarded;
 
                     // Update store with teams
                     this.teams = result.teams || [];
@@ -1547,19 +1561,24 @@ function initializeTeamsCore() {
                     if (window.ManifestAppwriteAuthTeamsDefaults && this.isTeamImmutable) {
                         for (const team of this.teams) {
                             if (!this._teamImmutableCache[team.$id]) {
-                                this._teamImmutableCache[team.$id] = await this.isTeamImmutable(team.$id);
+                                const immutable = await this.isTeamImmutable(team.$id);
+                                if (stale()) return discarded;
+                                this._teamImmutableCache[team.$id] = immutable;
                             }
                         }
                     }
 
                     // Load deleted template teams (if defaults module is loaded)
                     if (window.ManifestAppwriteAuthTeamsDefaults && this.getDeletedTemplateTeams) {
-                        this.deletedTemplateTeams = await this.getDeletedTemplateTeams();
+                        const deletedTemplateTeams = await this.getDeletedTemplateTeams();
+                        if (stale()) return discarded;
+                        this.deletedTemplateTeams = deletedTemplateTeams;
                     }
 
                     // Clean up duplicate default teams (permanent/template) if any exist
                     if (window.ManifestAppwriteAuthTeamsDefaults && this.cleanupDuplicateDefaultTeams) {
                         const cleanupResult = await this.cleanupDuplicateDefaultTeams();
+                        if (stale()) return discarded;
                         if (cleanupResult.cleaned > 0) {
                             if (cleanupResult.errors && cleanupResult.errors.length > 0) {
                                 console.warn('[Manifest Appwrite Auth] Some duplicate teams could not be deleted:', cleanupResult.errors);
@@ -1568,12 +1587,15 @@ function initializeTeamsCore() {
                             if (this.listTeams) {
                                 await this.listTeams();
                             }
+                            if (stale()) return discarded;
                         }
                     }
 
                     // Load deleted template roles for current team (if roles defaults module is loaded)
                     if (this.currentTeam && this.currentTeam.$id && window.ManifestAppwriteAuthTeamsRolesDefaults && this.getDeletedTemplateRoles) {
-                        this.deletedTemplateRoles = await this.getDeletedTemplateRoles(this.currentTeam.$id);
+                        const deletedTemplateRoles = await this.getDeletedTemplateRoles(this.currentTeam.$id);
+                        if (stale()) return discarded;
+                        this.deletedTemplateRoles = deletedTemplateRoles;
                     }
 
                     // Set currentTeam to first default team if available and not already set
@@ -1582,8 +1604,10 @@ function initializeTeamsCore() {
                         const hasDefaultTeams = (appwriteConfig?.permanentTeams && Array.isArray(appwriteConfig.permanentTeams) && appwriteConfig.permanentTeams.length > 0) ||
                             (appwriteConfig?.templateTeams && Array.isArray(appwriteConfig.templateTeams) && appwriteConfig.templateTeams.length > 0);
 
+                        if (stale()) return discarded;
                         if (hasDefaultTeams && window.ManifestAppwriteAuthTeamsDefaults && this.getDefaultTeams) {
                             const defaultTeams = await this.getDefaultTeams();
+                            if (stale()) return discarded;
                             if (defaultTeams.length > 0) {
                                 this.currentTeam = defaultTeams[0];
                             } else {
@@ -1598,12 +1622,14 @@ function initializeTeamsCore() {
                     if (this.currentTeam && this.currentTeam.$id && window.ManifestAppwriteAuthTeamsMembers && this.listMemberships) {
                         try {
                             const membershipsResult = await this.listMemberships(this.currentTeam.$id);
+                            if (stale()) return discarded;
                             if (membershipsResult.success) {
                                 this.currentTeamMemberships = membershipsResult.memberships || [];
                             }
                         } catch (error) {
                             // Silently handle errors (e.g., team was deleted)
                             // listMemberships already handles "team not found" gracefully
+                            if (stale()) return discarded;
                             this.currentTeamMemberships = [];
                         }
                     }
@@ -1613,6 +1639,7 @@ function initializeTeamsCore() {
                     // Check for any truthy value (function, object, or true flag)
                     if (!this._teamsRealtimeUnsubscribe && !this._teamsRealtimeSubscribing) {
                         const appwriteConfig = await config.getAppwriteConfig();
+                        if (stale()) return discarded;
                         if (this._appwrite?.realtime && this.startTeamsRealtime) {
                             this.startTeamsRealtime();
                         } else if (appwriteConfig?.teamsPollInterval && typeof appwriteConfig.teamsPollInterval === 'number' && appwriteConfig.teamsPollInterval > 0) {
@@ -1626,6 +1653,7 @@ function initializeTeamsCore() {
 
                     return { success: true, teams: result.teams || [], total: result.total || 0 };
                 } catch (error) {
+                    if (stale()) return discarded;
                     this.error = error.message;
                     return { success: false, error: error.message };
                 }

package/lib/manifest.appwrite.data.js

@@ -2,7 +2,7 @@
 
 (function () {
 
-const MANIFEST_BUILD_VERSION = '0.5.226';
+const MANIFEST_BUILD_VERSION = '0.5.228';
 
 /* Manifest Data Sources - Appwrite Integration */
 

package/lib/manifest.data.js

@@ -2,7 +2,7 @@
 
 (function () {
 
-const MANIFEST_BUILD_VERSION = '0.5.226';
+const MANIFEST_BUILD_VERSION = '0.5.228';
 
 /* Manifest Data Sources - Configuration */
 
@@ -11459,13 +11459,14 @@ function scheduleAuthRetry(dataSourceName, locale) {
     AUTH_RETRY_EVENTS.forEach(type => window.addEventListener(type, retry));
 }
 
-// Teams known for this identity: login/anonymous dispatch after teams load, teams-loaded after the background load
+// Teams known for this identity: login/anonymous dispatch after teams load, teams-loaded after the background load.
+// A cross-tab login arrives before this tab's team load; its teams-loaded follows.
 let teamsSettledFor = null;
 // A sign-in deadline already answered by an auth event no longer holds sources
 let answeredDeadline = 0;
 if (typeof window !== 'undefined') {
     ['manifest:auth:teams-loaded', 'manifest:auth:login', 'manifest:auth:anonymous'].forEach(type =>
-        window.addEventListener(type, () => { teamsSettledFor = authUserId(currentAuth()); }));
+        window.addEventListener(type, e => { if (!e?.detail?.crossTab) teamsSettledFor = authUserId(currentAuth()); }));
     // Kept only when logout restored the same (guest) identity whose teams already loaded
     ['manifest:auth:logout', 'manifest:auth:session-cleared', 'manifest:auth:initialized'].forEach(type =>
         window.addEventListener(type, () => { if (type === 'manifest:auth:initialized' || teamsSettledFor !== authUserId(currentAuth())) teamsSettledFor = null; }));
@@ -11481,10 +11482,11 @@ function authUserId(auth) {
     return auth?.user?.$id || auth?.user?.id || null;
 }
 
-// Guest-auto or an auth callback is signing in after a signed-out init (bounded by the auth store)
+// Guest-auto or an auth callback is signing in after a signed-out init (bounded by the auth store).
+// Not while the session is unverified (no sign-in follows until Appwrite is reachable).
 // Prerender never waits on (or bakes) a guest's rows
 function signInWaitMs(auth) {
-    if (!auth || auth.isAuthenticated === true || window.__manifestRender) return 0;
+    if (!auth || auth.isAuthenticated === true || auth._sessionUnverified === true || window.__manifestRender) return 0;
     const until = auth._signInPendingUntil || 0;
     if (until === answeredDeadline) return 0;
     return Math.max(0, until - Date.now());
@@ -11551,6 +11553,8 @@ function confirmedIdentity() {
 // A previous user's rows drop at once; rows read signed out stay live until the reload lands.
 function setupAuthResetListener() {
     let bound = (currentAuth() ? confirmedIdentity() : null) ?? lastKnownIdentity();
+    // Reads under an unverified session failed or came from the snapshot: confirming the same identity still reloads
+    let unverified = currentAuth()?._sessionUnverified === true;
     const reset = async (clear) => {
         const manifest = await window.ManifestDataConfig?.ensureManifest?.();
         const ds = window.ManifestDataStore;
@@ -11571,12 +11575,17 @@ function setupAuthResetListener() {
     const onAuth = (type) => {
         const ended = type === 'manifest:auth:logout' || type === 'manifest:auth:session-cleared';
         const next = confirmedIdentity() ?? (ended ? '' : null);
-        if (next === null) return;
+        if (next === null) { if (currentAuth()?._sessionUnverified === true) unverified = true; return; }
         const prev = bound;
         bound = next;
-        if (prev === next) return;
-        // Unknown before: rows so far were read under this same session (a sign-out still drops them)
-        if (prev === null && !ended) return;
+        const recovered = unverified;
+        unverified = false;
+        // Same identity, or unknown before (rows so far were read under this same session; a sign-out still drops them):
+        // no reset, but an unverified boot's reads are redone with the rows kept live
+        if (prev === next || (prev === null && !ended)) {
+            if (recovered) reset(false);
+            return;
+        }
         reset(prev !== '');
     };
     ['manifest:auth:logout', 'manifest:auth:session-cleared', 'manifest:auth:login', 'manifest:auth:anonymous', 'manifest:auth:initialized']

package/lib/manifest.integrity.json

@@ -1,6 +1,6 @@
 {
-  "manifest.appwrite.auth.js": "sha384-Ek2fHprBtcIFHAkOHtELD40gjfME3lWdmIQGB7h8+gcm7hn5QJzt9DRpo9huz4BE",
-  "manifest.appwrite.data.js": "sha384-bwfWutqQz9CnVgvXIKCR9VZrRQ3ytswJ6zvKOevhLobHOaryZazSAr4tFRurawiZ",
+  "manifest.appwrite.auth.js": "sha384-dsIWnH0qCAGSzAXMGrd8fvOrVl4tOIE6j5tC35JPTrQXZ56qLD36ARyvhR7vi3Id",
+  "manifest.appwrite.data.js": "sha384-KZ8iQZ7C8DRx64IK49o+sqXFxHhIK7GKm8cRj4gvEy1MYmVWpnCmznPCWztFI5g3",
   "manifest.appwrite.presences.js": "sha384-JyVDWFT69b7Svq8J8p9tNWe2v9PZNQBY5UyhtOl1vnuHFAX0CRQ3MA9SiKq5wzNh",
   "manifest.bindings.js": "sha384-lPtMf8Ykaic9gNVZKq8Scia1881ZeMAyxer3WCIkUNwwrgzGBWto1OXADUwjvORF",
   "manifest.charts.js": "sha384-gEAv/98+29RbhvNkiNWTNyBPbLTFr2Ld15wLu29FLCL57j1cwGChRrL9Pfk7dBtT",
@@ -11,7 +11,7 @@
   "manifest.combobox.js": "sha384-MILTkrgsTzsYUjGo4ZuADqV85Xs4GmfB4xexfe9vbJMIoQTZ42W4zs+DTaVSPEsx",
   "manifest.components.js": "sha384-4bc3HgPvF9DHMiOG08w+nWXI7Hho01RuAPAUL9xyLxOiS2igeZpulCVcvr5aT9v6",
   "manifest.computed.js": "sha384-GYML/e81gQfN+iDbqhPUgny8bINCyL+SrbTofoGk4hlCnLLjv51mCv42JMqq+ku5",
-  "manifest.data.js": "sha384-Dtpxer0CayxZCsGD8zCe8lW4MwsnaWA7Yxu1cWBxPQI1PJHh6qCwEJejHYt2go3F",
+  "manifest.data.js": "sha384-kaByNpTzaPcQiJeIDl7CTnXale/otGrq4BG9dfv+Fhw+s95z4A7YhgvtAZmMKLIa",
   "manifest.datepicker.js": "sha384-XnbeURni2X91ozVzatQcSjYYIS4MoW12dBRJnYAGBr0nCQ624heH5s+xtQSpLZX6",
   "manifest.defer.js": "sha384-WcCf8YQ1bKIXCLSZ24a0bJwepbYntYc8TzQM50hklo5VMIH8AtzDnwl6WU4prRv1",
   "manifest.device.js": "sha384-g+txmrEszYtuOvRelTp/c1wSNR2AtllVI9rx5NPPD7DzhVUnMNughonZykv2xlBW",
@@ -20,14 +20,14 @@
   "manifest.export.js": "sha384-Rx6XvqBZc4apzP/FwcDr6yIln4/zNa08Q4ZqBZcEqUz1aNZQfl4h0+Ae7mqCQyuG",
   "manifest.icons.js": "sha384-kKOINpX70YzNO3FvkV6umrmO3f0KIu0DNbwB+ej55a7y/lhU7v/myQtXL0bwCTbt",
   "manifest.localization.js": "sha384-EImsIw8Z3l13V5eH9ZJF/yfsOfIvR1oPRNSArANkPji7V8O3IRf6zMwsNiAGj3Hk",
-  "manifest.markdown.js": "sha384-JWUxlUZADxk1hZY7NpDX051UhtXt/ofpfsCDBRcweU6JhLbN8B832yPLgCatxFdl",
+  "manifest.markdown.js": "sha384-heyDR40LXHaAmAuA+fa381uFwShk1oAqpFFY6E2Qq4T3VN0TQfRqyc++MF40K5Hj",
   "manifest.native.js": "sha384-g+txmrEszYtuOvRelTp/c1wSNR2AtllVI9rx5NPPD7DzhVUnMNughonZykv2xlBW",
   "manifest.payments.js": "sha384-8pofk2zhxtapPMpwnFyTelPMrYhShNhDCE722uQh/EYFvZFuPLmSdgunqsarVQjv",
   "manifest.router.js": "sha384-xkQaHO60lMQwtnqGPxPJJ646eyqBjINs4AFesrQbe2dWqPIoIcJ9RD5wsjqjak7w",
   "manifest.slides.js": "sha384-3uRTkyK9XPLmnxI2+igZlpi4EyPlU/7IHj5j3BZJJ2KN455vXyk99fiXV3feO/XY",
   "manifest.status.js": "sha384-MBO345ab7H6Uq1X2dZLt4Ge1Gcra+Z2qYApvlAeIV8CJhDDJrz2FPXpp+Kcp8zcM",
   "manifest.svg.js": "sha384-qr/8H9+2cIhSXNbRWRtIdrDlTOxKlNJqwEefHvCYoiBNW/kKhPTFa109Orv/EBnb",
-  "manifest.sw.js": "sha384-e59BjfTqiJXTPdMgK3bkvYA2mzha1WEQeLgPABSDg35IPb+5Zd0BMUvND2kxrxoc",
+  "manifest.sw.js": "sha384-r3vBPbaW3PRru8sBETOY01m0hg7bV5IgEptsEmnZReTHSIfKWoFgrV6GivNkphuK",
   "manifest.tabs.js": "sha384-OIIcyaQnGS0eNYk4zgAFEDboNYect7THvUd9D0V6nqCeDOxQcoiqLrBEmmWVTTet",
   "manifest.tailwind.js": "sha384-r/Jvqb+Piz21jUts10BbVAJoKkShOdJRVFpywyi4HPIi/OfOJq5CtPyWAPbdkMgt",
   "manifest.text.edit.js": "sha384-RzOvLQE8GbmI6gntAwiotDewYT/08OHcd7sJ5hLon8e8u1Xbq1D7VfEGuaRVd2CE",

package/lib/manifest.markdown.js

@@ -769,9 +769,17 @@ async function initializeMarkdownPlugin() {
                                 }, 0);
                             }
                         }
-                    }
 
-                    // Code highlighting is handled by manifest.code.js plugin
+                        // Notify the code plugin to scan the new subtree — copy-only
+                        // inline codespans have no directive, so initTree misses them.
+                        if (window.ManifestCode?.observeAll) {
+                            window.ManifestCode.observeAll(el);
+                        }
+                        document.dispatchEvent(new CustomEvent('manifest:code-blocks-converted', {
+                            bubbles: true,
+                            detail: { root: el }
+                        }));
+                    }
 
                     // Show content with fade-in
                     hasContent = true;
@@ -835,6 +843,9 @@ async function initializeMarkdownPlugin() {
                         // Post-process HTML to enable checkboxes (remove disabled attribute)
                         html = html.replace(/<input type="checkbox"([^>]*?)disabled([^>]*?)>/g, '<input type="checkbox"$1$2>');
 
+                        // Promote inline `foo`{copy} blocks to real attributes.
+                        html = applyInlineCodeAttributes(html);
+
                         // Apply opt-in DOMPurify sanitization for x-markdown.safe
                         html = await maybeSanitizeMarkdownHtml(html, safe);
 
@@ -888,8 +899,15 @@ async function initializeMarkdownPlugin() {
                         // Start initialization
                         initAlpine();
 
-                        // Re-highlight code blocks after content update
-                        // Code highlighting is handled by manifest.code.js plugin
+                        // Notify the code plugin to scan the new subtree — copy-only
+                        // inline codespans have no directive, so initTree misses them.
+                        if (window.ManifestCode?.observeAll) {
+                            window.ManifestCode.observeAll(element);
+                        }
+                        document.dispatchEvent(new CustomEvent('manifest:code-blocks-converted', {
+                            bubbles: true,
+                            detail: { root: element }
+                        }));
                     } catch (error) {
                         console.error('[Manifest Markdown] Failed to process element:', error);
                     }

package/lib/manifest.sw.js

@@ -16,7 +16,7 @@
 
 // Build stamps the published version here; unstamped (dev) falls back to the
 // registration URL's `v`, then 'dev'.
-const BUILD_VERSION = '0.5.226';
+const BUILD_VERSION = '0.5.228';
 const CACHE_PREFIX = 'mnfst-sw:';
 const META_CACHE = CACHE_PREFIX + 'meta';
 // Sized to hold a full precache.json warm-up (PRECACHE_MAX_ENTRIES server-side)

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "mnfst",
-    "version": "0.5.226",
+    "version": "0.5.228",
     "private": false,
     "workspaces": [
         "templates/starter",