mnfst 0.5.248 → 0.5.250

package/lib/manifest.appwrite.data.js

@@ -2,7 +2,7 @@
 
 (function () {
 
-const MANIFEST_BUILD_VERSION = '0.5.248';
+const MANIFEST_BUILD_VERSION = '0.5.250';
 
 /* Manifest Data Sources - Appwrite Integration */
 
@@ -683,17 +683,40 @@ window.ManifestDataAppwrite = {
 
 
 /* Manifest Data Sources - Real-time Subscriptions
-   One shared Realtime client per tab; channels ref-counted across sources. */
-
-// Map<channel, { refs, unsubscribe, handlers: Map<sourceName, handler> }>
-const channels = new Map();
-// Map<sourceName, { channel, token }> — token guards a stale unsubscribe closure
+   One shared Realtime client per tab; subscriptions ref-counted by
+   (channel + canonical server-filter set) across sources.
+
+   Appwrite Realtime queries (server-side event filtering), verified against
+   the Web SDK and server source 2026-10:
+   - Realtime#subscribe(channels, callback, queries?) — queries are per
+     subscription (Query strings, ANDed; OR across subscriptions), supported
+     ops: equal/notEqual/lessThan(Equal)/greaterThan(Equal)/isNull/isNotNull/
+     and/or. SDK >=25.0.0 sends {type:'subscribe', data:[{subscriptionId,
+     channels, queries}]} socket messages and dispatches by the matched
+     subscription ids the server echoes; 22.4-24 carried per-slot queries in
+     the socket URL. subscribe() resolves to {unsubscribe, update, close}.
+   - Feature detection: a query-capable instance has pendingSubscribes (>=25)
+     or slotToSubscriptionId (22.4-24). Without either marker: channel-only
+     subscribe, exactly the 0.5.248 path.
+   - The server evaluates queries against the event payload only, so an
+     update that makes a held row STOP matching is not delivered. Therefore
+     serverFilter defaults to 'scope': only scope-column filters (permission-
+     mirrored, effectively immutable) ride the subscription; user queries stay
+     client-side so stop-matching rows still drop live. 'all' pushes every
+     expressible filter server-side (such rows then correct on the next load);
+     false sends none. The client matcher stays on in every mode. */
+
+// Map<subKey, { channel, queries, refs, unsubscribe, handlers: Map<sourceName, handler> }>
+const entries = new Map();
+// Map<sourceName, { subKey, channel, token, handler, getFilters }> — token guards a stale unsubscribe closure
 const sources = new Map();
 // Map<sourceName, fn(eventType, row)> — pre-filters, run per event per source
 const filters = new Map();
 // Back-compat/debug surface: Map<sourceName, unsubscribeFunction>
 const subscriptions = new Map();
-// Instance the current channel subscriptions live on
+// Map<sourceName, n> — explicit teardowns; aborts a subscribe in flight
+const tombstones = new Map();
+// Instance the current subscriptions live on
 let activeRealtime = null;
 
 function classify(event) {
@@ -704,10 +727,22 @@ function classify(event) {
     return null;
 }
 
+// Query-capable Realtime service (see header): detect per instance, never assume
+function supportsQueries(realtime) {
+    return !!(realtime && (realtime.pendingSubscribes || realtime.slotToSubscriptionId));
+}
+
+// (channel, resolved filter set) → stable subscription key; resolved.key is
+// already canonical (sorted) so equivalent filter sets share one subscription
+function subKeyFor(channel, resolved) {
+    if (!resolved || !resolved.key) return channel;
+    return `${channel}\u001f${resolved.key}`;
+}
+
 // Fan one SDK message out: each registered source handler gets each event once,
 // after that source's pre-filter (setFilter) — before any merge/dedup work
-function dispatch(channel, response) {
-    const entry = channels.get(channel);
+function dispatch(subKey, response) {
+    const entry = entries.get(subKey);
     if (!entry || !response || !response.events) return;
     const events = Array.isArray(response.events) ? response.events : [response.events];
     let payload = response.payload;
@@ -723,97 +758,183 @@ function dispatch(channel, response) {
     }
 }
 
-function sdkSubscribe(realtime, channel) {
-    return realtime.subscribe(channel, response => dispatch(channel, response));
+// subscribe() returns an unsubscribe function (legacy client) or a
+// Promise<RealtimeSubscription> (Realtime service): normalize teardown
+function dropSub(sub) {
+    if (typeof sub === 'function') sub();
+    else if (sub && typeof sub.unsubscribe === 'function') sub.unsubscribe(); // per-subscription; never risks the shared socket
+    else if (sub && typeof sub.close === 'function') sub.close();
 }
 
-// Drop a source's registration; tear the channel down when the last source leaves
-function detach(name, token) {
-    const cur = sources.get(name);
-    if (!cur || (token && cur.token !== token)) return;
-    sources.delete(name);
-    const entry = channels.get(cur.channel);
+function makeUnsubscriber(result) {
+    if (!result || typeof result.then !== 'function') {
+        return () => { try { dropSub(result); } catch (e) { /* socket already gone */ } };
+    }
+    const settled = result.catch(() => null);
+    return () => { settled.then(dropSub).catch(() => { /* socket already gone */ }); };
+}
+
+function sdkSubscribe(realtime, subKey, channel, queries) {
+    const cb = response => dispatch(subKey, response);
+    const result = (queries && queries.length)
+        ? realtime.subscribe(channel, cb, queries)
+        : realtime.subscribe(channel, cb);
+    return makeUnsubscriber(result);
+}
+
+// Get or create the shared entry for (channel, filters); registered in the map
+// before the SDK call so an event arriving mid-subscribe already dispatches
+function ensureEntry(realtime, subKey, channel, queries) {
+    let entry = entries.get(subKey);
+    if (entry) return entry;
+    entry = { channel, queries: queries || [], refs: 0, unsubscribe: null, handlers: new Map() };
+    entries.set(subKey, entry);
+    try {
+        entry.unsubscribe = sdkSubscribe(realtime, subKey, channel, queries);
+    } catch (error) {
+        entries.delete(subKey);
+        throw error;
+    }
+    return entry;
+}
+
+function removeFromEntry(name, subKey) {
+    const entry = entries.get(subKey);
     if (!entry) return;
     entry.handlers.delete(name);
     entry.refs = entry.handlers.size;
     if (entry.refs === 0) {
-        channels.delete(cur.channel);
+        entries.delete(subKey);
         if (typeof entry.unsubscribe === 'function') {
             try { entry.unsubscribe(); } catch (e) { /* socket already gone */ }
         }
     }
 }
 
-// Instance changed (client rebuilt on identity change): re-bind live channels
+// Drop a source's registration; tear the subscription down when the last source leaves
+function detach(name, token) {
+    const cur = sources.get(name);
+    if (!cur || (token && cur.token !== token)) return;
+    sources.delete(name);
+    removeFromEntry(name, cur.subKey);
+}
+
+// Instance changed (client rebuilt on identity change): re-resolve each source's
+// filters ($auth. values are stale) and regroup subscriptions on the new instance.
+// Chained so overlapping rebuilds run in order; a superseded rebuild stops.
+let syncChain = Promise.resolve();
 function syncInstance(realtime) {
-    if (activeRealtime === realtime) return;
+    if (activeRealtime === realtime) return syncChain;
     activeRealtime = realtime;
-    for (const [channel, entry] of channels) {
+    syncChain = syncChain
+        .then(() => rebindAll(realtime))
+        .catch(error => console.error('[Manifest Data] Realtime rebind failed:', error));
+    return syncChain;
+}
+
+async function rebindAll(realtime) {
+    for (const [, entry] of entries) {
         if (typeof entry.unsubscribe === 'function') {
             try { entry.unsubscribe(); } catch (e) { /* old instance */ }
         }
+    }
+    entries.clear();
+    const canQuery = supportsQueries(realtime);
+    for (const [name, src] of sources) {
+        if (activeRealtime !== realtime) return; // superseded by a newer instance
+        const resolved = (canQuery && src.getFilters) ? await src.getFilters() : null;
+        const subKey = subKeyFor(src.channel, resolved);
         try {
-            entry.unsubscribe = sdkSubscribe(realtime, channel);
+            const entry = ensureEntry(realtime, subKey, src.channel, resolved?.queries);
+            entry.handlers.set(name, src.handler);
+            entry.refs = entry.handlers.size;
+            src.subKey = subKey;
         } catch (error) {
-            console.error('[Manifest Data] Failed to re-subscribe channel:', channel, error);
+            console.error('[Manifest Data] Failed to re-subscribe channel:', src.channel, error);
         }
     }
 }
 
-// One SDK subscribe per distinct channel, however many sources share it.
-// isCurrent: false once the requesting load is superseded (logout) — skip, never touch a newer entry
-async function subscribeChannel(dataSourceName, channel, onEvent, isCurrent) {
-    detach(dataSourceName);
-    subscriptions.delete(dataSourceName);
-
+// One SDK subscribe per distinct (channel, filter set); sources sharing both share it.
+// isCurrent: false once the requesting load is superseded (logout) — skip, never touch a newer entry.
+// getFilters: async () => ({ queries, key }) | null, re-run per (re)subscribe so
+// $auth. values resolve at subscribe time; null → channel-only (0.5.248 path).
+// A replaced registration detaches only after the new subscription is live (no
+// event gap); overlap double-delivery is absorbed by the per-source event dedupe.
+async function subscribeChannel(dataSourceName, channel, onEvent, isCurrent, getFilters) {
+    const epoch = tombstones.get(dataSourceName) || 0;
     const services = await window.ManifestDataAppwrite.getAppwriteDataServices();
     if (isCurrent && !isCurrent()) return null;
     if (!services?.realtime) {
         console.warn('[Manifest Data] Realtime service not available for', dataSourceName);
+        detach(dataSourceName);
+        subscriptions.delete(dataSourceName);
         return null;
     }
-    syncInstance(services.realtime);
+    const realtime = services.realtime;
+    await syncInstance(realtime);
+    if (isCurrent && !isCurrent()) return null;
 
-    let entry = channels.get(channel);
-    if (!entry) {
-        entry = { refs: 0, unsubscribe: null, handlers: new Map() };
-        try {
-            entry.unsubscribe = sdkSubscribe(services.realtime, channel);
-        } catch (error) {
-            console.error('[Manifest Data] Failed to subscribe:', channel, error);
-            return null;
-        }
-        channels.set(channel, entry);
+    const resolved = (supportsQueries(realtime) && getFilters) ? await getFilters() : null;
+    if (isCurrent && !isCurrent()) return null;
+    // Torn down while resolving: land nothing
+    if ((tombstones.get(dataSourceName) || 0) !== epoch) return null;
+    // Instance replaced while resolving (identity rebuild): re-run against the live one
+    if (activeRealtime !== realtime) return subscribeChannel(dataSourceName, channel, onEvent, isCurrent, getFilters);
+    const subKey = subKeyFor(channel, resolved);
+
+    const prev = sources.get(dataSourceName);
+    let entry;
+    try {
+        entry = ensureEntry(realtime, subKey, channel, resolved?.queries);
+    } catch (error) {
+        console.error('[Manifest Data] Failed to subscribe:', channel, error);
+        detach(dataSourceName);
+        subscriptions.delete(dataSourceName);
+        return null;
     }
     const token = Symbol(dataSourceName);
     entry.handlers.set(dataSourceName, onEvent);
     entry.refs = entry.handlers.size;
-    sources.set(dataSourceName, { channel, token });
+    sources.set(dataSourceName, { subKey, channel, token, handler: onEvent, getFilters });
+    if (prev && prev.subKey !== subKey) removeFromEntry(dataSourceName, prev.subKey);
 
     const unsubscribe = () => detach(dataSourceName, token);
     subscriptions.set(dataSourceName, unsubscribe);
     return unsubscribe;
 }
 
+// Resolver re-runs per (re)subscribe so $auth. values are current at that moment
+function filterResolver(filterSpec) {
+    if (!filterSpec) return null;
+    const build = window.ManifestDataQueries?.buildRealtimeQueries;
+    if (typeof build !== 'function') return null;
+    return () => build(filterSpec.queriesConfig, filterSpec.scope, filterSpec.scopeColumns, filterSpec.mode);
+}
+
 // Subscribe to storage bucket file changes
-function subscribeToStorageBucket(dataSourceName, bucketId, scope, onEvent, isCurrent) {
-    return subscribeChannel(dataSourceName, `buckets.${bucketId}.files`, onEvent, isCurrent);
+function subscribeToStorageBucket(dataSourceName, bucketId, scope, onEvent, isCurrent, filterSpec) {
+    return subscribeChannel(dataSourceName, `buckets.${bucketId}.files`, onEvent, isCurrent, filterResolver(filterSpec));
 }
 
 // Subscribe to database table row changes
-function subscribeToTable(dataSourceName, databaseId, tableId, scope, onEvent, isCurrent) {
-    return subscribeChannel(dataSourceName, `databases.${databaseId}.tables.${tableId}.rows`, onEvent, isCurrent);
+function subscribeToTable(dataSourceName, databaseId, tableId, scope, onEvent, isCurrent, filterSpec) {
+    return subscribeChannel(dataSourceName, `databases.${databaseId}.tables.${tableId}.rows`, onEvent, isCurrent, filterResolver(filterSpec));
 }
 
 // Unsubscribe from a data source
 function unsubscribeFromDataSource(dataSourceName) {
+    tombstones.set(dataSourceName, (tombstones.get(dataSourceName) || 0) + 1);
     detach(dataSourceName);
     subscriptions.delete(dataSourceName);
 }
 
 // Unsubscribe from all data sources
 function unsubscribeAll() {
-    for (const name of [...sources.keys()]) detach(name);
+    for (const name of [...sources.keys()]) {
+        tombstones.set(name, (tombstones.get(name) || 0) + 1);
+        detach(name);
+    }
     subscriptions.clear();
 }
 
@@ -825,11 +946,11 @@ function setFilter(sourceName, fn) {
 }
 
 // Identity events rebuild the shared Realtime (manifest.data.appwrite.js drops
-// its memo on the same events); re-bind any live channels to the new instance
+// its memo on the same events); re-bind live subscriptions to the new instance
 if (typeof window !== 'undefined') {
     ['manifest:auth:login', 'manifest:auth:logout', 'manifest:auth:anonymous', 'manifest:auth:session-cleared', 'manifest:auth:initialized']
         .forEach(type => window.addEventListener(type, async () => {
-            if (!channels.size) return;
+            if (!sources.size) return;
             const services = await window.ManifestDataAppwrite?.getAppwriteDataServices?.();
             if (services?.realtime) syncInstance(services.realtime);
         }));
@@ -843,7 +964,7 @@ window.ManifestDataRealtime = {
     unsubscribeAll,
     setFilter,
     subscriptions, // Expose for debugging
-    _channels: channels // Expose for debugging
+    _channels: entries // Expose for debugging (keyed by channel + filter set)
 };
 
 
@@ -1334,6 +1455,42 @@ function toAppwriteQuery(queryArray) {
     }
 }
 
+// Realtime-expressible operators: the intersection of what the load serializes
+// (QUERY_MAP), what the matcher evaluates, and what Appwrite realtime filters
+// server-side. isNull/isNotNull are realtime-supported but the load drops them,
+// so filtering on them server-side would drop events the matcher keeps — excluded.
+const REALTIME_FILTER_OPS = new Set(['equal', 'notEqual', 'lessThan', 'lessThanEqual', 'greaterThan', 'greaterThanEqual']);
+
+function isRealtimeExpressible(query) {
+    if (!Array.isArray(query) || query.length === 0) return false;
+    const [method, ...args] = query;
+    if (method === 'or') return Array.isArray(args[0]) && args[0].length > 0 && args[0].every(isRealtimeExpressible);
+    return REALTIME_FILTER_OPS.has(method);
+}
+
+// Server-side realtime filter set, reduced to the expressible subset. Omitting
+// a query only WIDENS delivery — the client matcher still filters — so
+// unexpressible queries are dropped whole, never approximated.
+// mode 'scope' (default): only scope-column queries ride the subscription —
+// permission-mirrored, so a row leaving the filter still delivers its last
+// event and drops live. 'all': user queries too (a held row that stops
+// matching then corrects on the next load, not instantly).
+// Returns { queries, key } (key = canonical sorted serialization, for
+// subscription sharing) or null (not ready / nothing expressible → channel-only
+// subscribe, the 0.5.248 path).
+async function buildRealtimeQueries(queriesConfig, scope, scopeColumns, mode = 'scope') {
+    const userConfig = (mode === 'all' && Array.isArray(queriesConfig)) ? queriesConfig : [];
+    const resolved = await buildQueries(userConfig, scope, scopeColumns);
+    if (resolved === null) return null;
+    const queries = resolved
+        .filter(isRealtimeExpressible)
+        .map(query => toAppwriteQuery(query))
+        .filter(query => query !== null);
+    if (queries.length === 0) return null;
+    const key = queries.map(q => typeof q === 'string' ? q : JSON.stringify(q)).sort().join('\u001e');
+    return { queries, key };
+}
+
 // Build Appwrite queries from configuration
 // scopeColumns: { team, user } column names (default teamId/userId) — see manifest.data.config.js getScopeColumns
 // Returns null ("not ready") straight through — see buildQueries.
@@ -1353,6 +1510,7 @@ window.ManifestDataQueries = {
     getAuthValue,
     buildQueries,
     buildAppwriteQueries,
+    buildRealtimeQueries,
     rowMatchesQueries,
     toAppwriteQuery,
     ALLOWED_VARIABLES,

package/lib/manifest.d.ts

@@ -342,7 +342,14 @@ export interface ManifestHaptics {
 /** `$biometric` from the device plugin. */
 export interface ManifestBiometric {
     available(): Promise<boolean>;
-    verify(opts?: Record<string, unknown>): Promise<unknown>;
+    verify(opts?: {
+        reason?: string;
+        title?: string;
+        subtitle?: string;
+        cancelTitle?: string;
+        fallbackTitle?: string;
+        allowDeviceCredential?: boolean;
+    }): Promise<{ verified: boolean; error?: string; code?: string }>;
 }
 
 /** `$camera` from the device plugin. */

package/lib/manifest.data.js

@@ -2,7 +2,7 @@
 
 (function () {
 
-const MANIFEST_BUILD_VERSION = '0.5.248';
+const MANIFEST_BUILD_VERSION = '0.5.250';
 
 /* Manifest Data Sources - Configuration */
 
@@ -11897,6 +11897,13 @@ function forgetRealtimeRow(dataSourceName, id) {
     if (i !== -1) meta.appended.splice(i, 1);
 }
 
+// realtime.serverFilter → mode: 'scope' (default) | 'all' (alias true) | null (false: no server filtering)
+function serverFilterMode(realtimeConfig) {
+    const sf = (realtimeConfig && typeof realtimeConfig === 'object') ? realtimeConfig.serverFilter : undefined;
+    if (sf === false) return null;
+    return (sf === 'all' || sf === true) ? 'all' : 'scope';
+}
+
 // Query-aware event filter: the source's own queries, evaluated client-side
 // (unevaluable → match; see rowMatchesQueries)
 function eventMatchesQueries(row, queriesConfig) {
@@ -12340,6 +12347,10 @@ async function loadDataSource(dataSourceName, locale = 'en', options = {}) {
                         const rtQueries = Array.isArray(queriesConfig?.default || queriesConfig) ? (queriesConfig.default || queriesConfig) : [];
                         const limitQ = rtQueries.find(q => Array.isArray(q) && q[0] === 'limit');
                         configureRealtimeMeta(dataSourceName, dataSource.realtime, Array.isArray(data) ? data.length : 0, limitQ ? limitQ[1] : null);
+                        // Events server-filtered where the SDK supports realtime queries; the client
+                        // matcher below still runs. serverFilter: 'scope' (default) | 'all' (alias true) | false
+                        const rtMode = serverFilterMode(dataSource.realtime);
+                        const rtFilterSpec = rtMode ? { queriesConfig: rtQueries, scope, scopeColumns, mode: rtMode } : null;
                         const unsubscribe = await window.ManifestDataRealtime.subscribeToTable(
                             dataSourceName,
                             appwriteConfig.databaseId,
@@ -12348,7 +12359,8 @@ async function loadDataSource(dataSourceName, locale = 'en', options = {}) {
                             async (eventType, payload) => {
                                 await handleTableRealtimeEvent(dataSourceName, appwriteConfig.databaseId, tableId, scope, scopeColumns, eventType, payload, generation, rtQueries);
                             },
-                            () => !superseded()
+                            () => !superseded(),
+                            rtFilterSpec
                         );
                         if (superseded()) { dropSubscription(dataSourceName, unsubscribe); landed = true; return null; }
                     }
@@ -12393,6 +12405,9 @@ async function loadDataSource(dataSourceName, locale = 'en', options = {}) {
                         const rtQueries = Array.isArray(queriesConfig?.default || queriesConfig) ? (queriesConfig.default || queriesConfig) : [];
                         const limitQ = rtQueries.find(q => Array.isArray(q) && q[0] === 'limit');
                         configureRealtimeMeta(dataSourceName, dataSource.realtime, Array.isArray(data) ? data.length : 0, limitQ ? limitQ[1] : null);
+                        // Buckets have no scope columns: server filtering only under serverFilter 'all'
+                        const rtMode = serverFilterMode(dataSource.realtime);
+                        const rtFilterSpec = rtMode ? { queriesConfig: rtQueries, scope: null, mode: rtMode } : null;
                         const unsubscribe = await window.ManifestDataRealtime.subscribeToStorageBucket(
                             dataSourceName,
                             bucketId,
@@ -12401,7 +12416,8 @@ async function loadDataSource(dataSourceName, locale = 'en', options = {}) {
                                 if (superseded()) return;
                                 await handleStorageRealtimeEvent(dataSourceName, bucketId, scope, eventType, payload, generation, rtQueries);
                             },
-                            () => !superseded()
+                            () => !superseded(),
+                            rtFilterSpec
                         );
                         if (superseded()) { dropSubscription(dataSourceName, unsubscribe); landed = true; return null; }
                     }

package/lib/manifest.device.js

@@ -15,6 +15,14 @@ function manifestNativePlugin(name) {
     const cap = window.Capacitor;
     return (cap && cap.Plugins && cap.Plugins[name]) || null;
 }
+// Whether a plugin exposes a native method. Bundled apps get a registerPlugin
+// Proxy where every property is a function, so prefer the native header.
+function manifestNativeHas(name, plugin, method) {
+    const headers = window.Capacitor && window.Capacitor.PluginHeaders;
+    const h = Array.isArray(headers) && headers.find(x => x && x.name === name);
+    if (h && Array.isArray(h.methods)) return h.methods.some(m => m && m.name === method);
+    return !!plugin && typeof plugin[method] === 'function';
+}
 function manifestNativePlatform() {
     const cap = window.Capacitor;
     if (cap && typeof cap.getPlatform === 'function') { try { return cap.getPlatform(); } catch (e) {} }
@@ -137,9 +145,8 @@ function initManifestNativeNetwork() {
 
 // $secure — Keychain/Keystore-backed key/value storage (native) with a
 // namespaced localStorage fallback on the web. Intended for session tokens etc.
-// Native: install a Capacitor secure-storage plugin registered as
-// window.Capacitor.Plugins.SecureStorage; if its method shape differs from the
-// adapters below, override with $secure.use(adapter). Verify on device.
+// Native: a plugin registered as SecureStorage (@aparajita/capacitor-secure-storage,
+// or any getItem/setItem or get/set shape); $secure.use(adapter) overrides.
 // The web fallback is NOT encrypted — it degrades honestly, not securely.
 
 const MANIFEST_SECURE_NS = 'mnfst:';
@@ -158,33 +165,63 @@ function manifestSecureWebBackend() {
     };
 }
 
-// Adapts the two common Capacitor secure-storage plugin shapes: localStorage-like
-// (getItem/setItem/removeItem) or object-arg (get/set/remove with {key,value}).
-function manifestSecureNativeBackend(plugin) {
-    const itemApi = typeof plugin.getItem === 'function';
+// aparajita's default prefix, so keys interop with its own getItem/setItem
+const MANIFEST_SECURE_NATIVE_PREFIX = 'capacitor-storage_';
+
+function manifestSecureFail(op, e) {
+    try { console.error('[Manifest] $secure.' + op + ' failed', e); } catch (_) {}
+    throw e instanceof Error ? e : new Error('$secure.' + op + ' failed: ' + ((e && (e.message || e.code)) || e));
+}
+
+// Adapts three native shapes: aparajita (internalGetItem…), localStorage-like
+// (getItem/setItem/removeItem) and object-arg (get/set/remove with {key,value}).
+function manifestSecureNativeBackend(plugin, name) {
+    const n = name || 'SecureStorage';
+    const has = (m) => manifestNativeHas(n, plugin, m);
+    const P = MANIFEST_SECURE_NATIVE_PREFIX;
+    const shape = has('internalGetItem') ? 'internal' : has('getItem') ? 'item' : has('get') ? 'object' : null;
+    const call = async (op, fn) => {
+        if (!shape) manifestSecureFail(op, new Error(n + ' plugin has no supported API; use $secure.use(adapter)'));
+        try { return await fn(); } catch (e) { manifestSecureFail(op, e); }
+    };
     return {
-        async get(key) {
-            try {
-                if (itemApi) { const v = await plugin.getItem(key); return v == null ? null : v; }
-                const r = await plugin.get({ key }); return r && typeof r.value !== 'undefined' ? r.value : (r == null ? null : r);
-            } catch (e) { return null; }
-        },
-        async set(key, value) {
-            try { if (itemApi) await plugin.setItem(key, String(value)); else await plugin.set({ key, value: String(value) }); } catch (e) {}
-        },
-        async remove(key) {
-            try { if (typeof plugin.removeItem === 'function') await plugin.removeItem(key); else await plugin.remove({ key }); } catch (e) {}
-        },
-        async keys() { try { const r = await plugin.keys(); return Array.isArray(r) ? r : (r && (r.keys || r.value)) || []; } catch (e) { return []; } },
-        async clear() { try { await plugin.clear(); } catch (e) {} }
+        get: (key) => call('get', async () => {
+            if (key == null || key === '') return null;
+            if (shape === 'internal') { const r = await plugin.internalGetItem({ prefixedKey: P + key }); return r && r.data != null ? r.data : null; }
+            if (shape === 'item') { const v = await plugin.getItem(key); return v == null ? null : v; }
+            const r = await plugin.get({ key }); return r && typeof r.value !== 'undefined' ? r.value : (r == null ? null : r);
+        }),
+        set: (key, value) => call('set', async () => {
+            if (key == null || key === '') throw new Error('No key provided');
+            if (shape === 'internal') await plugin.internalSetItem({ prefixedKey: P + key, data: String(value) });
+            else if (shape === 'item') await plugin.setItem(key, String(value));
+            else await plugin.set({ key, value: String(value) });
+        }),
+        remove: (key) => call('remove', async () => {
+            if (key == null || key === '') return;
+            if (shape === 'internal') await plugin.internalRemoveItem({ prefixedKey: P + key });
+            else if (shape === 'item') {
+                if (!has('removeItem')) throw new Error(n + ' plugin has no removeItem(); use $secure.use(adapter)');
+                await plugin.removeItem(key);
+            }
+            else await plugin.remove({ key });
+        }),
+        keys: () => call('keys', async () => {
+            if (shape === 'internal') { const r = await plugin.internalGetPrefixedKeys({ prefix: P }); return ((r && r.keys) || []).map(k => k.slice(P.length)); }
+            const r = await plugin.keys(); return Array.isArray(r) ? r : (r && (r.keys || r.value)) || [];
+        }),
+        clear: () => call('clear', async () => {
+            if (shape === 'internal') await plugin.internalClearItemsWithPrefix({ prefix: P });
+            else await plugin.clear();
+        })
     };
 }
 
 let _manifestSecureBackend = null;
 function manifestSecureBackend() {
     if (_manifestSecureBackend) return _manifestSecureBackend;
-    const plugin = manifestNativePlugin('SecureStorage');
-    _manifestSecureBackend = plugin ? manifestSecureNativeBackend(plugin) : manifestSecureWebBackend();
+    const plugin = manifestNativeIsNative() ? manifestNativePlugin('SecureStorage') : null;
+    _manifestSecureBackend = plugin ? manifestSecureNativeBackend(plugin, 'SecureStorage') : manifestSecureWebBackend();
     return _manifestSecureBackend;
 }
 
@@ -392,33 +429,57 @@ function initManifestHaptics() {
 }
 
 
-// $biometric — Face ID / Touch ID. Native: a Capacitor biometric plugin
-// (BiometricAuth or NativeBiometric; method shapes differ, adapted below). The web
-// has no equivalent one-shot verify (WebAuthn is a separate server ceremony), so
-// available() is false and verify() reports unsupported — a genuine native win.
+// $biometric — Face ID / Touch ID. Native: @aparajita/capacitor-biometric-auth
+// (BiometricAuthNative) or @capgo/capacitor-native-biometric (NativeBiometric).
+// No web equivalent: available() is false and verify() reports unsupported.
 
+const MANIFEST_BIOMETRIC_PLUGINS = ['BiometricAuthNative', 'BiometricAuth', 'NativeBiometric'];
+
+// Native only: bundled web builds expose plugin web stubs that always "verify".
 function manifestBiometricPlugin() {
-    return manifestNativePlugin('BiometricAuth') || manifestNativePlugin('NativeBiometric') || null;
+    if (!manifestNativeIsNative()) return null;
+    for (const name of MANIFEST_BIOMETRIC_PLUGINS) {
+        const plugin = manifestNativePlugin(name);
+        if (plugin) return { name, plugin };
+    }
+    return null;
+}
+
+function manifestBiometricWarn(msg, e) {
+    try { console.warn('[Manifest] $biometric: ' + msg, e || ''); } catch (_) {}
 }
 
 async function manifestBiometricAvailable() {
-    const B = manifestBiometricPlugin();
-    if (!B) return false;
+    const found = manifestBiometricPlugin();
+    if (!found) return false;
+    const { name, plugin: B } = found;
     try {
-        if (typeof B.checkBiometry === 'function') { const r = await B.checkBiometry(); return !!(r && r.isAvailable); }
-        if (typeof B.isAvailable === 'function') { const r = await B.isAvailable(); return !!(r && r.isAvailable !== false); }
-    } catch (e) {}
+        if (manifestNativeHas(name, B, 'checkBiometry')) { const r = await B.checkBiometry(); return !!(r && r.isAvailable); }
+        if (manifestNativeHas(name, B, 'isAvailable')) { const r = await B.isAvailable(); return !!(r && r.isAvailable !== false); }
+    } catch (e) { manifestBiometricWarn('availability check failed', e); return false; }
+    manifestBiometricWarn(name + ' has no checkBiometry() or isAvailable()');
     return false;
 }
 
 async function manifestBiometricVerify(opts) {
     const o = opts || {};
-    const B = manifestBiometricPlugin();
-    if (!B) return { verified: false, error: 'unsupported' };
+    const found = manifestBiometricPlugin();
+    if (!found) return { verified: false, error: 'unsupported' };
+    const { name, plugin: B } = found;
     try {
-        if (typeof B.authenticate === 'function') { await B.authenticate({ reason: o.reason, title: o.title, subtitle: o.subtitle, cancelTitle: o.cancelTitle }); return { verified: true }; }
-        if (typeof B.verifyIdentity === 'function') { await B.verifyIdentity({ reason: o.reason, title: o.title, subtitle: o.subtitle }); return { verified: true }; }
-    } catch (e) { return { verified: false, error: (e && (e.message || e.code)) || 'failed' }; }
+        // aparajita: native method + its own option names
+        if (manifestNativeHas(name, B, 'internalAuthenticate') || manifestNativeHas(name, B, 'authenticate')) {
+            const args = { reason: o.reason, cancelTitle: o.cancelTitle, iosFallbackTitle: o.fallbackTitle, androidTitle: o.title, androidSubtitle: o.subtitle, allowDeviceCredential: o.allowDeviceCredential };
+            if (manifestNativeHas(name, B, 'internalAuthenticate')) await B.internalAuthenticate(args);
+            else await B.authenticate(args);
+            return { verified: true };
+        }
+        if (manifestNativeHas(name, B, 'verifyIdentity')) {
+            await B.verifyIdentity({ reason: o.reason, description: o.reason, title: o.title, subtitle: o.subtitle, negativeButtonText: o.cancelTitle, useFallback: !!o.allowDeviceCredential, fallbackTitle: o.fallbackTitle });
+            return { verified: true };
+        }
+    } catch (e) { return { verified: false, error: (e && (e.message || e.code)) || 'failed', code: (e && e.code) || undefined }; }
+    manifestBiometricWarn(name + ' has no supported verify method');
     return { verified: false, error: 'unsupported' };
 }
 

package/lib/manifest.integrity.json

@@ -1,6 +1,6 @@
 {
   "manifest.appwrite.auth.js": "sha384-dsIWnH0qCAGSzAXMGrd8fvOrVl4tOIE6j5tC35JPTrQXZ56qLD36ARyvhR7vi3Id",
-  "manifest.appwrite.data.js": "sha384-cmzVdqqqKGSMnroBhHczc9m7W72E9O/fV2KEHRDgHkTiLTbZjJj2bAoaVbXtn3A8",
+  "manifest.appwrite.data.js": "sha384-7n9o9oibFpnpHDDJ8oYPtiIPddMZyKmmQfXVSwPvTQQw5kK4hz6QNxjmDqjPbbgU",
   "manifest.appwrite.presences.js": "sha384-JyVDWFT69b7Svq8J8p9tNWe2v9PZNQBY5UyhtOl1vnuHFAX0CRQ3MA9SiKq5wzNh",
   "manifest.bindings.js": "sha384-lPtMf8Ykaic9gNVZKq8Scia1881ZeMAyxer3WCIkUNwwrgzGBWto1OXADUwjvORF",
   "manifest.charts.js": "sha384-G+huD7UvjF9zDovdVVlh4I5X1Mq4oNnJfoFg4NnGdP3R/4Skq9hy5cGuHNYLxDYm",
@@ -11,24 +11,24 @@
   "manifest.combobox.js": "sha384-MILTkrgsTzsYUjGo4ZuADqV85Xs4GmfB4xexfe9vbJMIoQTZ42W4zs+DTaVSPEsx",
   "manifest.components.js": "sha384-BUFA8h+G5Plr82sV7bKzO42pPoiRZwRQcKj1lt2ROFiKjjlkayU/vmkAFqEsdBA+",
   "manifest.computed.js": "sha384-GYML/e81gQfN+iDbqhPUgny8bINCyL+SrbTofoGk4hlCnLLjv51mCv42JMqq+ku5",
-  "manifest.data.js": "sha384-+1UOcfFJFXzjpwvvFiLB08B0++DrRbt/CssP8XuAmO+BdqqFfXafC1KmYLlzUEDC",
+  "manifest.data.js": "sha384-E3eYfLsWJzw3OjoBBG/tcJPnvEq8guDOBCtnro7hMHA73LcCjlKIjMDFLzpnmUSn",
   "manifest.datepicker.js": "sha384-2XwFFnS4Bg5FDvG/v8x6KUvrjcBQEOYyTxynX2K/D/Qb3PI6+Y04lEwCnVDJLzwL",
   "manifest.defer.js": "sha384-pMRGqQKiEoJhpUcD40QeM4jEHau7sz9Xn/YCpiUamT1T4xJBZDSiYX+xnVrSWoq+",
-  "manifest.device.js": "sha384-g+txmrEszYtuOvRelTp/c1wSNR2AtllVI9rx5NPPD7DzhVUnMNughonZykv2xlBW",
+  "manifest.device.js": "sha384-LseLVXfne1wPR8xXM1jqSqylUxekRF3v26TIEaEICE3a4vxjdXoxOJ3wsLAU0zq+",
   "manifest.dropdowns.js": "sha384-acufUps7R9WjqB4XXW5JLACqniuHJGM4CNTb2rF4B2Q/jv7ZRmsAwfr2McanOz3s",
   "manifest.edit.js": "sha384-MOgQNdNLeHijhR0u2W6ntoOulKFglsATCFDqkinesOU15tHoILk/JNzHKkGi5dUG",
   "manifest.export.js": "sha384-Rx6XvqBZc4apzP/FwcDr6yIln4/zNa08Q4ZqBZcEqUz1aNZQfl4h0+Ae7mqCQyuG",
   "manifest.icons.js": "sha384-kKOINpX70YzNO3FvkV6umrmO3f0KIu0DNbwB+ej55a7y/lhU7v/myQtXL0bwCTbt",
   "manifest.localization.js": "sha384-EImsIw8Z3l13V5eH9ZJF/yfsOfIvR1oPRNSArANkPji7V8O3IRf6zMwsNiAGj3Hk",
   "manifest.markdown.js": "sha384-heyDR40LXHaAmAuA+fa381uFwShk1oAqpFFY6E2Qq4T3VN0TQfRqyc++MF40K5Hj",
-  "manifest.native.js": "sha384-g+txmrEszYtuOvRelTp/c1wSNR2AtllVI9rx5NPPD7DzhVUnMNughonZykv2xlBW",
+  "manifest.native.js": "sha384-LseLVXfne1wPR8xXM1jqSqylUxekRF3v26TIEaEICE3a4vxjdXoxOJ3wsLAU0zq+",
   "manifest.payments.js": "sha384-8pofk2zhxtapPMpwnFyTelPMrYhShNhDCE722uQh/EYFvZFuPLmSdgunqsarVQjv",
   "manifest.rich.text.js": "sha384-ZBV9jXmu2nmprEHicddRE/m7nR4RPZtVc969Jte0+EJYBcVph7itkjcgN/61PyeC",
   "manifest.router.js": "sha384-JcKnEb0E9azl6DVSN1DQMysyZOpGkskSQREjD947sMEs87nFEeZpCigB0iq8psz5",
   "manifest.slides.js": "sha384-3uRTkyK9XPLmnxI2+igZlpi4EyPlU/7IHj5j3BZJJ2KN455vXyk99fiXV3feO/XY",
   "manifest.status.js": "sha384-MBO345ab7H6Uq1X2dZLt4Ge1Gcra+Z2qYApvlAeIV8CJhDDJrz2FPXpp+Kcp8zcM",
   "manifest.svg.js": "sha384-qr/8H9+2cIhSXNbRWRtIdrDlTOxKlNJqwEefHvCYoiBNW/kKhPTFa109Orv/EBnb",
-  "manifest.sw.js": "sha384-sTcnAL2w7bznwSS8c7uFDuPd/ImDTZlO1FBddiOuR0iDaiPo0TGPGeYk0ZeWUbQ5",
+  "manifest.sw.js": "sha384-3uO0YGmWHY8tHYrkFf+yAVtEwzM+HIbtCZLKR5suOfKWOL7dd8Yul9+kiB2UM1X4",
   "manifest.tabs.js": "sha384-OIIcyaQnGS0eNYk4zgAFEDboNYect7THvUd9D0V6nqCeDOxQcoiqLrBEmmWVTTet",
   "manifest.tailwind.js": "sha384-r/Jvqb+Piz21jUts10BbVAJoKkShOdJRVFpywyi4HPIi/OfOJq5CtPyWAPbdkMgt",
   "manifest.toasts.js": "sha384-3zkWxzw693pxg3QDFsoYCA3CqYaLKmBaMArULXODD66Utolpewl0OAeTB92aWUVv",

package/lib/manifest.native.js

@@ -15,6 +15,14 @@ function manifestNativePlugin(name) {
     const cap = window.Capacitor;
     return (cap && cap.Plugins && cap.Plugins[name]) || null;
 }
+// Whether a plugin exposes a native method. Bundled apps get a registerPlugin
+// Proxy where every property is a function, so prefer the native header.
+function manifestNativeHas(name, plugin, method) {
+    const headers = window.Capacitor && window.Capacitor.PluginHeaders;
+    const h = Array.isArray(headers) && headers.find(x => x && x.name === name);
+    if (h && Array.isArray(h.methods)) return h.methods.some(m => m && m.name === method);
+    return !!plugin && typeof plugin[method] === 'function';
+}
 function manifestNativePlatform() {
     const cap = window.Capacitor;
     if (cap && typeof cap.getPlatform === 'function') { try { return cap.getPlatform(); } catch (e) {} }
@@ -137,9 +145,8 @@ function initManifestNativeNetwork() {
 
 // $secure — Keychain/Keystore-backed key/value storage (native) with a
 // namespaced localStorage fallback on the web. Intended for session tokens etc.
-// Native: install a Capacitor secure-storage plugin registered as
-// window.Capacitor.Plugins.SecureStorage; if its method shape differs from the
-// adapters below, override with $secure.use(adapter). Verify on device.
+// Native: a plugin registered as SecureStorage (@aparajita/capacitor-secure-storage,
+// or any getItem/setItem or get/set shape); $secure.use(adapter) overrides.
 // The web fallback is NOT encrypted — it degrades honestly, not securely.
 
 const MANIFEST_SECURE_NS = 'mnfst:';
@@ -158,33 +165,63 @@ function manifestSecureWebBackend() {
     };
 }
 
-// Adapts the two common Capacitor secure-storage plugin shapes: localStorage-like
-// (getItem/setItem/removeItem) or object-arg (get/set/remove with {key,value}).
-function manifestSecureNativeBackend(plugin) {
-    const itemApi = typeof plugin.getItem === 'function';
+// aparajita's default prefix, so keys interop with its own getItem/setItem
+const MANIFEST_SECURE_NATIVE_PREFIX = 'capacitor-storage_';
+
+function manifestSecureFail(op, e) {
+    try { console.error('[Manifest] $secure.' + op + ' failed', e); } catch (_) {}
+    throw e instanceof Error ? e : new Error('$secure.' + op + ' failed: ' + ((e && (e.message || e.code)) || e));
+}
+
+// Adapts three native shapes: aparajita (internalGetItem…), localStorage-like
+// (getItem/setItem/removeItem) and object-arg (get/set/remove with {key,value}).
+function manifestSecureNativeBackend(plugin, name) {
+    const n = name || 'SecureStorage';
+    const has = (m) => manifestNativeHas(n, plugin, m);
+    const P = MANIFEST_SECURE_NATIVE_PREFIX;
+    const shape = has('internalGetItem') ? 'internal' : has('getItem') ? 'item' : has('get') ? 'object' : null;
+    const call = async (op, fn) => {
+        if (!shape) manifestSecureFail(op, new Error(n + ' plugin has no supported API; use $secure.use(adapter)'));
+        try { return await fn(); } catch (e) { manifestSecureFail(op, e); }
+    };
     return {
-        async get(key) {
-            try {
-                if (itemApi) { const v = await plugin.getItem(key); return v == null ? null : v; }
-                const r = await plugin.get({ key }); return r && typeof r.value !== 'undefined' ? r.value : (r == null ? null : r);
-            } catch (e) { return null; }
-        },
-        async set(key, value) {
-            try { if (itemApi) await plugin.setItem(key, String(value)); else await plugin.set({ key, value: String(value) }); } catch (e) {}
-        },
-        async remove(key) {
-            try { if (typeof plugin.removeItem === 'function') await plugin.removeItem(key); else await plugin.remove({ key }); } catch (e) {}
-        },
-        async keys() { try { const r = await plugin.keys(); return Array.isArray(r) ? r : (r && (r.keys || r.value)) || []; } catch (e) { return []; } },
-        async clear() { try { await plugin.clear(); } catch (e) {} }
+        get: (key) => call('get', async () => {
+            if (key == null || key === '') return null;
+            if (shape === 'internal') { const r = await plugin.internalGetItem({ prefixedKey: P + key }); return r && r.data != null ? r.data : null; }
+            if (shape === 'item') { const v = await plugin.getItem(key); return v == null ? null : v; }
+            const r = await plugin.get({ key }); return r && typeof r.value !== 'undefined' ? r.value : (r == null ? null : r);
+        }),
+        set: (key, value) => call('set', async () => {
+            if (key == null || key === '') throw new Error('No key provided');
+            if (shape === 'internal') await plugin.internalSetItem({ prefixedKey: P + key, data: String(value) });
+            else if (shape === 'item') await plugin.setItem(key, String(value));
+            else await plugin.set({ key, value: String(value) });
+        }),
+        remove: (key) => call('remove', async () => {
+            if (key == null || key === '') return;
+            if (shape === 'internal') await plugin.internalRemoveItem({ prefixedKey: P + key });
+            else if (shape === 'item') {
+                if (!has('removeItem')) throw new Error(n + ' plugin has no removeItem(); use $secure.use(adapter)');
+                await plugin.removeItem(key);
+            }
+            else await plugin.remove({ key });
+        }),
+        keys: () => call('keys', async () => {
+            if (shape === 'internal') { const r = await plugin.internalGetPrefixedKeys({ prefix: P }); return ((r && r.keys) || []).map(k => k.slice(P.length)); }
+            const r = await plugin.keys(); return Array.isArray(r) ? r : (r && (r.keys || r.value)) || [];
+        }),
+        clear: () => call('clear', async () => {
+            if (shape === 'internal') await plugin.internalClearItemsWithPrefix({ prefix: P });
+            else await plugin.clear();
+        })
     };
 }
 
 let _manifestSecureBackend = null;
 function manifestSecureBackend() {
     if (_manifestSecureBackend) return _manifestSecureBackend;
-    const plugin = manifestNativePlugin('SecureStorage');
-    _manifestSecureBackend = plugin ? manifestSecureNativeBackend(plugin) : manifestSecureWebBackend();
+    const plugin = manifestNativeIsNative() ? manifestNativePlugin('SecureStorage') : null;
+    _manifestSecureBackend = plugin ? manifestSecureNativeBackend(plugin, 'SecureStorage') : manifestSecureWebBackend();
     return _manifestSecureBackend;
 }
 
@@ -392,33 +429,57 @@ function initManifestHaptics() {
 }
 
 
-// $biometric — Face ID / Touch ID. Native: a Capacitor biometric plugin
-// (BiometricAuth or NativeBiometric; method shapes differ, adapted below). The web
-// has no equivalent one-shot verify (WebAuthn is a separate server ceremony), so
-// available() is false and verify() reports unsupported — a genuine native win.
+// $biometric — Face ID / Touch ID. Native: @aparajita/capacitor-biometric-auth
+// (BiometricAuthNative) or @capgo/capacitor-native-biometric (NativeBiometric).
+// No web equivalent: available() is false and verify() reports unsupported.
 
+const MANIFEST_BIOMETRIC_PLUGINS = ['BiometricAuthNative', 'BiometricAuth', 'NativeBiometric'];
+
+// Native only: bundled web builds expose plugin web stubs that always "verify".
 function manifestBiometricPlugin() {
-    return manifestNativePlugin('BiometricAuth') || manifestNativePlugin('NativeBiometric') || null;
+    if (!manifestNativeIsNative()) return null;
+    for (const name of MANIFEST_BIOMETRIC_PLUGINS) {
+        const plugin = manifestNativePlugin(name);
+        if (plugin) return { name, plugin };
+    }
+    return null;
+}
+
+function manifestBiometricWarn(msg, e) {
+    try { console.warn('[Manifest] $biometric: ' + msg, e || ''); } catch (_) {}
 }
 
 async function manifestBiometricAvailable() {
-    const B = manifestBiometricPlugin();
-    if (!B) return false;
+    const found = manifestBiometricPlugin();
+    if (!found) return false;
+    const { name, plugin: B } = found;
     try {
-        if (typeof B.checkBiometry === 'function') { const r = await B.checkBiometry(); return !!(r && r.isAvailable); }
-        if (typeof B.isAvailable === 'function') { const r = await B.isAvailable(); return !!(r && r.isAvailable !== false); }
-    } catch (e) {}
+        if (manifestNativeHas(name, B, 'checkBiometry')) { const r = await B.checkBiometry(); return !!(r && r.isAvailable); }
+        if (manifestNativeHas(name, B, 'isAvailable')) { const r = await B.isAvailable(); return !!(r && r.isAvailable !== false); }
+    } catch (e) { manifestBiometricWarn('availability check failed', e); return false; }
+    manifestBiometricWarn(name + ' has no checkBiometry() or isAvailable()');
     return false;
 }
 
 async function manifestBiometricVerify(opts) {
     const o = opts || {};
-    const B = manifestBiometricPlugin();
-    if (!B) return { verified: false, error: 'unsupported' };
+    const found = manifestBiometricPlugin();
+    if (!found) return { verified: false, error: 'unsupported' };
+    const { name, plugin: B } = found;
     try {
-        if (typeof B.authenticate === 'function') { await B.authenticate({ reason: o.reason, title: o.title, subtitle: o.subtitle, cancelTitle: o.cancelTitle }); return { verified: true }; }
-        if (typeof B.verifyIdentity === 'function') { await B.verifyIdentity({ reason: o.reason, title: o.title, subtitle: o.subtitle }); return { verified: true }; }
-    } catch (e) { return { verified: false, error: (e && (e.message || e.code)) || 'failed' }; }
+        // aparajita: native method + its own option names
+        if (manifestNativeHas(name, B, 'internalAuthenticate') || manifestNativeHas(name, B, 'authenticate')) {
+            const args = { reason: o.reason, cancelTitle: o.cancelTitle, iosFallbackTitle: o.fallbackTitle, androidTitle: o.title, androidSubtitle: o.subtitle, allowDeviceCredential: o.allowDeviceCredential };
+            if (manifestNativeHas(name, B, 'internalAuthenticate')) await B.internalAuthenticate(args);
+            else await B.authenticate(args);
+            return { verified: true };
+        }
+        if (manifestNativeHas(name, B, 'verifyIdentity')) {
+            await B.verifyIdentity({ reason: o.reason, description: o.reason, title: o.title, subtitle: o.subtitle, negativeButtonText: o.cancelTitle, useFallback: !!o.allowDeviceCredential, fallbackTitle: o.fallbackTitle });
+            return { verified: true };
+        }
+    } catch (e) { return { verified: false, error: (e && (e.message || e.code)) || 'failed', code: (e && e.code) || undefined }; }
+    manifestBiometricWarn(name + ' has no supported verify method');
     return { verified: false, error: 'unsupported' };
 }
 

package/lib/manifest.schema.json

@@ -246,7 +246,7 @@
                                 }
                             },
                             "realtime": {
-                                "description": "Realtime subscription config. false disables the subscription. { mode, maxRows } bounds growth: 'append' (default) stops appending at maxRows and counts skipped events in $realtimeOverflow; 'window' keeps the initial window size by evicting the oldest realtime-appended rows. maxRows defaults to max(500, 2x the initially loaded rows); 0 opts into legacy unbounded growth.",
+                                "description": "Realtime subscription config. false disables the subscription. { mode, maxRows } bounds growth: 'append' (default) stops appending at maxRows and counts skipped events in $realtimeOverflow; 'window' keeps the initial window size by evicting the oldest realtime-appended rows. maxRows defaults to max(500, 2x the initially loaded rows); 0 opts into legacy unbounded growth. serverFilter picks which filters ride the Appwrite realtime subscription server-side: 'scope' (default) sends only scope-column filters; 'all' (alias true) sends every expressible filter — rows that stop matching then drop on the next load instead of instantly; false sends none.",
                                 "oneOf": [
                                     {
                                         "type": "boolean"
@@ -264,6 +264,20 @@
                                             "maxRows": {
                                                 "type": "number",
                                                 "minimum": 0
+                                            },
+                                            "serverFilter": {
+                                                "oneOf": [
+                                                    {
+                                                        "type": "boolean"
+                                                    },
+                                                    {
+                                                        "type": "string",
+                                                        "enum": [
+                                                            "scope",
+                                                            "all"
+                                                        ]
+                                                    }
+                                                ]
                                             }
                                         },
                                         "additionalProperties": false

package/lib/manifest.sw.js

@@ -16,7 +16,7 @@
 
 // Build stamps the published version here; unstamped (dev) falls back to the
 // registration URL's `v`, then 'dev'.
-const BUILD_VERSION = '0.5.248';
+const BUILD_VERSION = '0.5.250';
 const CACHE_PREFIX = 'mnfst-sw:';
 const META_CACHE = CACHE_PREFIX + 'meta';
 // Sized to hold a full precache.json warm-up (PRECACHE_MAX_ENTRIES server-side)

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "mnfst",
-    "version": "0.5.248",
+    "version": "0.5.250",
     "private": false,
     "workspaces": [
         "templates/starter",