mnfst 0.5.249 → 0.5.251

package/lib/manifest.appwrite.data.js

@@ -2,7 +2,7 @@
 
 (function () {
 
-const MANIFEST_BUILD_VERSION = '0.5.249';
+const MANIFEST_BUILD_VERSION = '0.5.251';
 
 /* Manifest Data Sources - Appwrite Integration */
 

package/lib/manifest.d.ts

@@ -342,7 +342,14 @@ export interface ManifestHaptics {
 /** `$biometric` from the device plugin. */
 export interface ManifestBiometric {
     available(): Promise<boolean>;
-    verify(opts?: Record<string, unknown>): Promise<unknown>;
+    verify(opts?: {
+        reason?: string;
+        title?: string;
+        subtitle?: string;
+        cancelTitle?: string;
+        fallbackTitle?: string;
+        allowDeviceCredential?: boolean;
+    }): Promise<{ verified: boolean; error?: string; code?: string }>;
 }
 
 /** `$camera` from the device plugin. */

package/lib/manifest.data.js

@@ -2,7 +2,7 @@
 
 (function () {
 
-const MANIFEST_BUILD_VERSION = '0.5.249';
+const MANIFEST_BUILD_VERSION = '0.5.251';
 
 /* Manifest Data Sources - Configuration */
 

package/lib/manifest.device.js

@@ -15,6 +15,25 @@ function manifestNativePlugin(name) {
     const cap = window.Capacitor;
     return (cap && cap.Plugins && cap.Plugins[name]) || null;
 }
+// Whether a plugin exposes a native method. Bundled apps get a registerPlugin
+// Proxy where every property is a function, so prefer the native header; a
+// header list without this plugin means it isn't installed natively.
+function manifestNativeHas(name, plugin, method) {
+    const headers = window.Capacitor && window.Capacitor.PluginHeaders;
+    if (Array.isArray(headers)) {
+        const h = headers.find(x => x && x.name === name);
+        if (!h) return false;
+        if (Array.isArray(h.methods)) return h.methods.some(m => m && m.name === method);
+    }
+    return !!plugin && typeof plugin[method] === 'function';
+}
+// A plugin with a native method, or null. Web builds use Manifest's own fallbacks,
+// not plugin web stubs, so bundled and plain web builds behave the same.
+function manifestNativeUse(name, method) {
+    if (!manifestNativeIsNative()) return null;
+    const plugin = manifestNativePlugin(name);
+    return plugin && manifestNativeHas(name, plugin, method) ? plugin : null;
+}
 function manifestNativePlatform() {
     const cap = window.Capacitor;
     if (cap && typeof cap.getPlatform === 'function') { try { return cap.getPlatform(); } catch (e) {} }
@@ -96,7 +115,7 @@ function manifestShareWeb(payload) {
 }
 function manifestShare(opts) {
     const payload = opts || {};
-    const Share = manifestNativePlugin('Share');
+    const Share = manifestNativeUse('Share', 'share');
     if (Share) {
         // When the native sheet is present, never fall through to the web sheet
         // (that would double-prompt); report the native outcome instead.
@@ -128,7 +147,7 @@ function manifestNativeApplyOnline(connected) {
     } catch (e) {}
 }
 function initManifestNativeNetwork() {
-    const Network = manifestNativePlugin('Network');
+    const Network = manifestNativeUse('Network', 'getStatus');
     if (!Network) return;
     try { Network.getStatus().then(s => manifestNativeApplyOnline(s && s.connected)).catch(() => {}); } catch (e) {}
     try { Network.addListener('networkStatusChange', s => manifestNativeApplyOnline(s && s.connected)); } catch (e) {}
@@ -137,9 +156,8 @@ function initManifestNativeNetwork() {
 
 // $secure — Keychain/Keystore-backed key/value storage (native) with a
 // namespaced localStorage fallback on the web. Intended for session tokens etc.
-// Native: install a Capacitor secure-storage plugin registered as
-// window.Capacitor.Plugins.SecureStorage; if its method shape differs from the
-// adapters below, override with $secure.use(adapter). Verify on device.
+// Native: a plugin registered as SecureStorage (@aparajita/capacitor-secure-storage,
+// or any getItem/setItem or get/set shape); $secure.use(adapter) overrides.
 // The web fallback is NOT encrypted — it degrades honestly, not securely.
 
 const MANIFEST_SECURE_NS = 'mnfst:';
@@ -158,33 +176,63 @@ function manifestSecureWebBackend() {
     };
 }
 
-// Adapts the two common Capacitor secure-storage plugin shapes: localStorage-like
-// (getItem/setItem/removeItem) or object-arg (get/set/remove with {key,value}).
-function manifestSecureNativeBackend(plugin) {
-    const itemApi = typeof plugin.getItem === 'function';
+// aparajita's default prefix, so keys interop with its own getItem/setItem
+const MANIFEST_SECURE_NATIVE_PREFIX = 'capacitor-storage_';
+
+function manifestSecureFail(op, e) {
+    try { console.error('[Manifest] $secure.' + op + ' failed', e); } catch (_) {}
+    throw e instanceof Error ? e : new Error('$secure.' + op + ' failed: ' + ((e && (e.message || e.code)) || e));
+}
+
+// Adapts three native shapes: aparajita (internalGetItem…), localStorage-like
+// (getItem/setItem/removeItem) and object-arg (get/set/remove with {key,value}).
+function manifestSecureNativeBackend(plugin, name) {
+    const n = name || 'SecureStorage';
+    const has = (m) => manifestNativeHas(n, plugin, m);
+    const P = MANIFEST_SECURE_NATIVE_PREFIX;
+    const shape = has('internalGetItem') ? 'internal' : has('getItem') ? 'item' : has('get') ? 'object' : null;
+    const call = async (op, fn) => {
+        if (!shape) manifestSecureFail(op, new Error(n + ' plugin has no supported API; use $secure.use(adapter)'));
+        try { return await fn(); } catch (e) { manifestSecureFail(op, e); }
+    };
     return {
-        async get(key) {
-            try {
-                if (itemApi) { const v = await plugin.getItem(key); return v == null ? null : v; }
-                const r = await plugin.get({ key }); return r && typeof r.value !== 'undefined' ? r.value : (r == null ? null : r);
-            } catch (e) { return null; }
-        },
-        async set(key, value) {
-            try { if (itemApi) await plugin.setItem(key, String(value)); else await plugin.set({ key, value: String(value) }); } catch (e) {}
-        },
-        async remove(key) {
-            try { if (typeof plugin.removeItem === 'function') await plugin.removeItem(key); else await plugin.remove({ key }); } catch (e) {}
-        },
-        async keys() { try { const r = await plugin.keys(); return Array.isArray(r) ? r : (r && (r.keys || r.value)) || []; } catch (e) { return []; } },
-        async clear() { try { await plugin.clear(); } catch (e) {} }
+        get: (key) => call('get', async () => {
+            if (key == null || key === '') return null;
+            if (shape === 'internal') { const r = await plugin.internalGetItem({ prefixedKey: P + key }); return r && r.data != null ? r.data : null; }
+            if (shape === 'item') { const v = await plugin.getItem(key); return v == null ? null : v; }
+            const r = await plugin.get({ key }); return r && typeof r.value !== 'undefined' ? r.value : (r == null ? null : r);
+        }),
+        set: (key, value) => call('set', async () => {
+            if (key == null || key === '') throw new Error('No key provided');
+            if (shape === 'internal') await plugin.internalSetItem({ prefixedKey: P + key, data: String(value) });
+            else if (shape === 'item') await plugin.setItem(key, String(value));
+            else await plugin.set({ key, value: String(value) });
+        }),
+        remove: (key) => call('remove', async () => {
+            if (key == null || key === '') return;
+            if (shape === 'internal') await plugin.internalRemoveItem({ prefixedKey: P + key });
+            else if (shape === 'item') {
+                if (!has('removeItem')) throw new Error(n + ' plugin has no removeItem(); use $secure.use(adapter)');
+                await plugin.removeItem(key);
+            }
+            else await plugin.remove({ key });
+        }),
+        keys: () => call('keys', async () => {
+            if (shape === 'internal') { const r = await plugin.internalGetPrefixedKeys({ prefix: P }); return ((r && r.keys) || []).map(k => k.slice(P.length)); }
+            const r = await plugin.keys(); return Array.isArray(r) ? r : (r && (r.keys || r.value)) || [];
+        }),
+        clear: () => call('clear', async () => {
+            if (shape === 'internal') await plugin.internalClearItemsWithPrefix({ prefix: P });
+            else await plugin.clear();
+        })
     };
 }
 
 let _manifestSecureBackend = null;
 function manifestSecureBackend() {
     if (_manifestSecureBackend) return _manifestSecureBackend;
-    const plugin = manifestNativePlugin('SecureStorage');
-    _manifestSecureBackend = plugin ? manifestSecureNativeBackend(plugin) : manifestSecureWebBackend();
+    const plugin = manifestNativeIsNative() ? manifestNativePlugin('SecureStorage') : null;
+    _manifestSecureBackend = plugin ? manifestSecureNativeBackend(plugin, 'SecureStorage') : manifestSecureWebBackend();
     return _manifestSecureBackend;
 }
 
@@ -251,7 +299,7 @@ function initManifestLinks() {
         get last() { const s = window.Alpine.store('links'); return s ? s.last : null; }
     }));
 
-    const App = manifestNativePlugin('App');
+    const App = manifestNativeUse('App', 'getLaunchUrl');
     if (App) {
         try { App.addListener('appUrlOpen', (data) => { if (data && data.url) manifestHandleUrl(data.url); }); } catch (e) {}
         try { App.getLaunchUrl().then(r => { if (r && r.url) manifestHandleUrl(r.url); }).catch(() => {}); } catch (e) {}
@@ -298,7 +346,7 @@ function initManifestPush() {
         window.Alpine.store('push', store);
     }
 
-    const Push = manifestNativePlugin('PushNotifications');
+    const Push = manifestNativeUse('PushNotifications', 'register');
     if (Push) {
         try { Push.addListener('registration', t => { store.token = t && t.value; _manifestPushTokenHandlers.forEach(fn => { try { fn(store.token); } catch (e) {} }); }); } catch (e) {}
         try { Push.addListener('pushNotificationReceived', n => { _manifestPushReceiveHandlers.forEach(fn => { try { fn(n); } catch (e) {} }); }); } catch (e) {}
@@ -307,13 +355,13 @@ function initManifestPush() {
 
     window.Alpine.magic('push', () => ({
         async request() {
-            const P = manifestNativePlugin('PushNotifications');
+            const P = manifestNativeUse('PushNotifications', 'requestPermissions');
             if (P) { try { const r = await P.requestPermissions(); const p = manifestPushMapPermission(r && r.receive); window.Alpine.store('push').permission = p; return p; } catch (e) { return 'denied'; } }
             if (typeof Notification !== 'undefined' && Notification.requestPermission) { try { const p = manifestPushMapPermission(await Notification.requestPermission()); window.Alpine.store('push').permission = p; return p; } catch (e) { return 'denied'; } }
             return 'unsupported';
         },
         async register() {
-            const P = manifestNativePlugin('PushNotifications');
+            const P = manifestNativeUse('PushNotifications', 'register');
             if (P) { try { await P.register(); } catch (e) {} }
         },
         onToken(fn) { if (typeof fn === 'function') _manifestPushTokenHandlers.push(fn); },
@@ -341,7 +389,7 @@ function initManifestApp() {
     const visible = (typeof document !== 'undefined') ? document.visibilityState !== 'hidden' : true;
     if (!window.Alpine.store('app')) window.Alpine.store('app', { active: visible });
 
-    const App = manifestNativePlugin('App');
+    const App = manifestNativeUse('App', 'getState');
     if (App) {
         try { App.addListener('appStateChange', s => manifestAppSetActive(s && s.isActive)); } catch (e) {}
     } else if (typeof document !== 'undefined') {
@@ -369,22 +417,22 @@ function manifestVibrate(pattern) {
 function initManifestHaptics() {
     window.Alpine.magic('haptics', () => ({
         impact(style) {
-            const H = manifestNativePlugin('Haptics');
+            const H = manifestNativeUse('Haptics', 'impact');
             if (H) { try { return H.impact({ style: style || 'MEDIUM' }); } catch (e) {} }
             manifestVibrate(10); return Promise.resolve();
         },
         notification(type) {
-            const H = manifestNativePlugin('Haptics');
+            const H = manifestNativeUse('Haptics', 'notification');
             if (H) { try { return H.notification({ type: type || 'SUCCESS' }); } catch (e) {} }
             manifestVibrate([10, 40, 10]); return Promise.resolve();
         },
         selection() {
-            const H = manifestNativePlugin('Haptics');
+            const H = manifestNativeUse('Haptics', 'selectionChanged');
             if (H) { try { return H.selectionChanged(); } catch (e) {} }
             manifestVibrate(5); return Promise.resolve();
         },
         vibrate(ms) {
-            const H = manifestNativePlugin('Haptics');
+            const H = manifestNativeUse('Haptics', 'vibrate');
             if (H) { try { return H.vibrate({ duration: ms || 300 }); } catch (e) {} }
             manifestVibrate(ms || 300); return Promise.resolve();
         }
@@ -392,33 +440,57 @@ function initManifestHaptics() {
 }
 
 
-// $biometric — Face ID / Touch ID. Native: a Capacitor biometric plugin
-// (BiometricAuth or NativeBiometric; method shapes differ, adapted below). The web
-// has no equivalent one-shot verify (WebAuthn is a separate server ceremony), so
-// available() is false and verify() reports unsupported — a genuine native win.
+// $biometric — Face ID / Touch ID. Native: @aparajita/capacitor-biometric-auth
+// (BiometricAuthNative) or @capgo/capacitor-native-biometric (NativeBiometric).
+// No web equivalent: available() is false and verify() reports unsupported.
+
+const MANIFEST_BIOMETRIC_PLUGINS = ['BiometricAuthNative', 'BiometricAuth', 'NativeBiometric'];
 
+// Native only: bundled web builds expose plugin web stubs that always "verify".
 function manifestBiometricPlugin() {
-    return manifestNativePlugin('BiometricAuth') || manifestNativePlugin('NativeBiometric') || null;
+    if (!manifestNativeIsNative()) return null;
+    for (const name of MANIFEST_BIOMETRIC_PLUGINS) {
+        const plugin = manifestNativePlugin(name);
+        if (plugin) return { name, plugin };
+    }
+    return null;
+}
+
+function manifestBiometricWarn(msg, e) {
+    try { console.warn('[Manifest] $biometric: ' + msg, e || ''); } catch (_) {}
 }
 
 async function manifestBiometricAvailable() {
-    const B = manifestBiometricPlugin();
-    if (!B) return false;
+    const found = manifestBiometricPlugin();
+    if (!found) return false;
+    const { name, plugin: B } = found;
     try {
-        if (typeof B.checkBiometry === 'function') { const r = await B.checkBiometry(); return !!(r && r.isAvailable); }
-        if (typeof B.isAvailable === 'function') { const r = await B.isAvailable(); return !!(r && r.isAvailable !== false); }
-    } catch (e) {}
+        if (manifestNativeHas(name, B, 'checkBiometry')) { const r = await B.checkBiometry(); return !!(r && r.isAvailable); }
+        if (manifestNativeHas(name, B, 'isAvailable')) { const r = await B.isAvailable(); return !!(r && r.isAvailable !== false); }
+    } catch (e) { manifestBiometricWarn('availability check failed', e); return false; }
+    manifestBiometricWarn(name + ' has no checkBiometry() or isAvailable()');
     return false;
 }
 
 async function manifestBiometricVerify(opts) {
     const o = opts || {};
-    const B = manifestBiometricPlugin();
-    if (!B) return { verified: false, error: 'unsupported' };
+    const found = manifestBiometricPlugin();
+    if (!found) return { verified: false, error: 'unsupported' };
+    const { name, plugin: B } = found;
     try {
-        if (typeof B.authenticate === 'function') { await B.authenticate({ reason: o.reason, title: o.title, subtitle: o.subtitle, cancelTitle: o.cancelTitle }); return { verified: true }; }
-        if (typeof B.verifyIdentity === 'function') { await B.verifyIdentity({ reason: o.reason, title: o.title, subtitle: o.subtitle }); return { verified: true }; }
-    } catch (e) { return { verified: false, error: (e && (e.message || e.code)) || 'failed' }; }
+        // aparajita: native method + its own option names
+        if (manifestNativeHas(name, B, 'internalAuthenticate') || manifestNativeHas(name, B, 'authenticate')) {
+            const args = { reason: o.reason, cancelTitle: o.cancelTitle, iosFallbackTitle: o.fallbackTitle, androidTitle: o.title, androidSubtitle: o.subtitle, allowDeviceCredential: o.allowDeviceCredential };
+            if (manifestNativeHas(name, B, 'internalAuthenticate')) await B.internalAuthenticate(args);
+            else await B.authenticate(args);
+            return { verified: true };
+        }
+        if (manifestNativeHas(name, B, 'verifyIdentity')) {
+            await B.verifyIdentity({ reason: o.reason, description: o.reason, title: o.title, subtitle: o.subtitle, negativeButtonText: o.cancelTitle, useFallback: !!o.allowDeviceCredential, fallbackTitle: o.fallbackTitle });
+            return { verified: true };
+        }
+    } catch (e) { return { verified: false, error: (e && (e.message || e.code)) || 'failed', code: (e && e.code) || undefined }; }
+    manifestBiometricWarn(name + ' has no supported verify method');
     return { verified: false, error: 'unsupported' };
 }
 
@@ -471,7 +543,7 @@ function manifestCameraWeb(opts) {
 
 function manifestCameraPhoto(opts) {
     const o = opts || {};
-    const Cam = manifestNativePlugin('Camera');
+    const Cam = manifestNativeUse('Camera', 'getPhoto');
     if (Cam) {
         return Cam.getPhoto({ resultType: 'dataUrl', source: o.source === 'photos' ? 'PHOTOS' : 'CAMERA', quality: o.quality || 90 })
             .then(r => ({ dataUrl: r && (r.dataUrl || r.webPath), format: r && r.format }))

package/lib/manifest.integrity.json

@@ -1,6 +1,6 @@
 {
   "manifest.appwrite.auth.js": "sha384-dsIWnH0qCAGSzAXMGrd8fvOrVl4tOIE6j5tC35JPTrQXZ56qLD36ARyvhR7vi3Id",
-  "manifest.appwrite.data.js": "sha384-DmpgWkBF02iuwOvFEq/0rpjHm5ts9F4Y961J8h6+gT2WhyGm3Ryp9Pgk0D/CWDki",
+  "manifest.appwrite.data.js": "sha384-ctnqsfCC4EDugNArRonGeZMTQn2iwksugU0309QM6l0uh6JJZOaU/Gsvvp8JrmZ3",
   "manifest.appwrite.presences.js": "sha384-JyVDWFT69b7Svq8J8p9tNWe2v9PZNQBY5UyhtOl1vnuHFAX0CRQ3MA9SiKq5wzNh",
   "manifest.bindings.js": "sha384-lPtMf8Ykaic9gNVZKq8Scia1881ZeMAyxer3WCIkUNwwrgzGBWto1OXADUwjvORF",
   "manifest.charts.js": "sha384-G+huD7UvjF9zDovdVVlh4I5X1Mq4oNnJfoFg4NnGdP3R/4Skq9hy5cGuHNYLxDYm",
@@ -11,24 +11,24 @@
   "manifest.combobox.js": "sha384-MILTkrgsTzsYUjGo4ZuADqV85Xs4GmfB4xexfe9vbJMIoQTZ42W4zs+DTaVSPEsx",
   "manifest.components.js": "sha384-BUFA8h+G5Plr82sV7bKzO42pPoiRZwRQcKj1lt2ROFiKjjlkayU/vmkAFqEsdBA+",
   "manifest.computed.js": "sha384-GYML/e81gQfN+iDbqhPUgny8bINCyL+SrbTofoGk4hlCnLLjv51mCv42JMqq+ku5",
-  "manifest.data.js": "sha384-viViXTPQiJr7QNSx9Ln+uMXyNif1EK10JAmyPqeW4I6FrNtUu5MgKt04sa7LkABg",
+  "manifest.data.js": "sha384-ryR3dpYNybgJ8GONlEhkB0myOYz7fhGdnjEpXvKXcCQJUjZQaZbX7J8caPWv7UsN",
   "manifest.datepicker.js": "sha384-2XwFFnS4Bg5FDvG/v8x6KUvrjcBQEOYyTxynX2K/D/Qb3PI6+Y04lEwCnVDJLzwL",
   "manifest.defer.js": "sha384-pMRGqQKiEoJhpUcD40QeM4jEHau7sz9Xn/YCpiUamT1T4xJBZDSiYX+xnVrSWoq+",
-  "manifest.device.js": "sha384-g+txmrEszYtuOvRelTp/c1wSNR2AtllVI9rx5NPPD7DzhVUnMNughonZykv2xlBW",
+  "manifest.device.js": "sha384-cm59lFxLFOu+DzQGkTUax0lfjZIeEz21vnk26c6nN0+/7irQwzVGt9u545BQjgzM",
   "manifest.dropdowns.js": "sha384-acufUps7R9WjqB4XXW5JLACqniuHJGM4CNTb2rF4B2Q/jv7ZRmsAwfr2McanOz3s",
   "manifest.edit.js": "sha384-MOgQNdNLeHijhR0u2W6ntoOulKFglsATCFDqkinesOU15tHoILk/JNzHKkGi5dUG",
   "manifest.export.js": "sha384-Rx6XvqBZc4apzP/FwcDr6yIln4/zNa08Q4ZqBZcEqUz1aNZQfl4h0+Ae7mqCQyuG",
   "manifest.icons.js": "sha384-kKOINpX70YzNO3FvkV6umrmO3f0KIu0DNbwB+ej55a7y/lhU7v/myQtXL0bwCTbt",
   "manifest.localization.js": "sha384-EImsIw8Z3l13V5eH9ZJF/yfsOfIvR1oPRNSArANkPji7V8O3IRf6zMwsNiAGj3Hk",
   "manifest.markdown.js": "sha384-heyDR40LXHaAmAuA+fa381uFwShk1oAqpFFY6E2Qq4T3VN0TQfRqyc++MF40K5Hj",
-  "manifest.native.js": "sha384-g+txmrEszYtuOvRelTp/c1wSNR2AtllVI9rx5NPPD7DzhVUnMNughonZykv2xlBW",
+  "manifest.native.js": "sha384-cm59lFxLFOu+DzQGkTUax0lfjZIeEz21vnk26c6nN0+/7irQwzVGt9u545BQjgzM",
   "manifest.payments.js": "sha384-8pofk2zhxtapPMpwnFyTelPMrYhShNhDCE722uQh/EYFvZFuPLmSdgunqsarVQjv",
   "manifest.rich.text.js": "sha384-ZBV9jXmu2nmprEHicddRE/m7nR4RPZtVc969Jte0+EJYBcVph7itkjcgN/61PyeC",
   "manifest.router.js": "sha384-JcKnEb0E9azl6DVSN1DQMysyZOpGkskSQREjD947sMEs87nFEeZpCigB0iq8psz5",
   "manifest.slides.js": "sha384-3uRTkyK9XPLmnxI2+igZlpi4EyPlU/7IHj5j3BZJJ2KN455vXyk99fiXV3feO/XY",
   "manifest.status.js": "sha384-MBO345ab7H6Uq1X2dZLt4Ge1Gcra+Z2qYApvlAeIV8CJhDDJrz2FPXpp+Kcp8zcM",
   "manifest.svg.js": "sha384-qr/8H9+2cIhSXNbRWRtIdrDlTOxKlNJqwEefHvCYoiBNW/kKhPTFa109Orv/EBnb",
-  "manifest.sw.js": "sha384-XGf/EbAhHXR7BCSlP6QFnCWPNxuwxyHgU/I8DdxEYw0UPQaZEGDlUILxExqx+ae+",
+  "manifest.sw.js": "sha384-9+0Y6SDUeQcjS5w5yr2OjMbyuM2uc3U4htcj+f+GUHBFL4X7zxm4u7fekQwAzyxI",
   "manifest.tabs.js": "sha384-OIIcyaQnGS0eNYk4zgAFEDboNYect7THvUd9D0V6nqCeDOxQcoiqLrBEmmWVTTet",
   "manifest.tailwind.js": "sha384-r/Jvqb+Piz21jUts10BbVAJoKkShOdJRVFpywyi4HPIi/OfOJq5CtPyWAPbdkMgt",
   "manifest.toasts.js": "sha384-3zkWxzw693pxg3QDFsoYCA3CqYaLKmBaMArULXODD66Utolpewl0OAeTB92aWUVv",

package/lib/manifest.native.js

@@ -15,6 +15,25 @@ function manifestNativePlugin(name) {
     const cap = window.Capacitor;
     return (cap && cap.Plugins && cap.Plugins[name]) || null;
 }
+// Whether a plugin exposes a native method. Bundled apps get a registerPlugin
+// Proxy where every property is a function, so prefer the native header; a
+// header list without this plugin means it isn't installed natively.
+function manifestNativeHas(name, plugin, method) {
+    const headers = window.Capacitor && window.Capacitor.PluginHeaders;
+    if (Array.isArray(headers)) {
+        const h = headers.find(x => x && x.name === name);
+        if (!h) return false;
+        if (Array.isArray(h.methods)) return h.methods.some(m => m && m.name === method);
+    }
+    return !!plugin && typeof plugin[method] === 'function';
+}
+// A plugin with a native method, or null. Web builds use Manifest's own fallbacks,
+// not plugin web stubs, so bundled and plain web builds behave the same.
+function manifestNativeUse(name, method) {
+    if (!manifestNativeIsNative()) return null;
+    const plugin = manifestNativePlugin(name);
+    return plugin && manifestNativeHas(name, plugin, method) ? plugin : null;
+}
 function manifestNativePlatform() {
     const cap = window.Capacitor;
     if (cap && typeof cap.getPlatform === 'function') { try { return cap.getPlatform(); } catch (e) {} }
@@ -96,7 +115,7 @@ function manifestShareWeb(payload) {
 }
 function manifestShare(opts) {
     const payload = opts || {};
-    const Share = manifestNativePlugin('Share');
+    const Share = manifestNativeUse('Share', 'share');
     if (Share) {
         // When the native sheet is present, never fall through to the web sheet
         // (that would double-prompt); report the native outcome instead.
@@ -128,7 +147,7 @@ function manifestNativeApplyOnline(connected) {
     } catch (e) {}
 }
 function initManifestNativeNetwork() {
-    const Network = manifestNativePlugin('Network');
+    const Network = manifestNativeUse('Network', 'getStatus');
     if (!Network) return;
     try { Network.getStatus().then(s => manifestNativeApplyOnline(s && s.connected)).catch(() => {}); } catch (e) {}
     try { Network.addListener('networkStatusChange', s => manifestNativeApplyOnline(s && s.connected)); } catch (e) {}
@@ -137,9 +156,8 @@ function initManifestNativeNetwork() {
 
 // $secure — Keychain/Keystore-backed key/value storage (native) with a
 // namespaced localStorage fallback on the web. Intended for session tokens etc.
-// Native: install a Capacitor secure-storage plugin registered as
-// window.Capacitor.Plugins.SecureStorage; if its method shape differs from the
-// adapters below, override with $secure.use(adapter). Verify on device.
+// Native: a plugin registered as SecureStorage (@aparajita/capacitor-secure-storage,
+// or any getItem/setItem or get/set shape); $secure.use(adapter) overrides.
 // The web fallback is NOT encrypted — it degrades honestly, not securely.
 
 const MANIFEST_SECURE_NS = 'mnfst:';
@@ -158,33 +176,63 @@ function manifestSecureWebBackend() {
     };
 }
 
-// Adapts the two common Capacitor secure-storage plugin shapes: localStorage-like
-// (getItem/setItem/removeItem) or object-arg (get/set/remove with {key,value}).
-function manifestSecureNativeBackend(plugin) {
-    const itemApi = typeof plugin.getItem === 'function';
+// aparajita's default prefix, so keys interop with its own getItem/setItem
+const MANIFEST_SECURE_NATIVE_PREFIX = 'capacitor-storage_';
+
+function manifestSecureFail(op, e) {
+    try { console.error('[Manifest] $secure.' + op + ' failed', e); } catch (_) {}
+    throw e instanceof Error ? e : new Error('$secure.' + op + ' failed: ' + ((e && (e.message || e.code)) || e));
+}
+
+// Adapts three native shapes: aparajita (internalGetItem…), localStorage-like
+// (getItem/setItem/removeItem) and object-arg (get/set/remove with {key,value}).
+function manifestSecureNativeBackend(plugin, name) {
+    const n = name || 'SecureStorage';
+    const has = (m) => manifestNativeHas(n, plugin, m);
+    const P = MANIFEST_SECURE_NATIVE_PREFIX;
+    const shape = has('internalGetItem') ? 'internal' : has('getItem') ? 'item' : has('get') ? 'object' : null;
+    const call = async (op, fn) => {
+        if (!shape) manifestSecureFail(op, new Error(n + ' plugin has no supported API; use $secure.use(adapter)'));
+        try { return await fn(); } catch (e) { manifestSecureFail(op, e); }
+    };
     return {
-        async get(key) {
-            try {
-                if (itemApi) { const v = await plugin.getItem(key); return v == null ? null : v; }
-                const r = await plugin.get({ key }); return r && typeof r.value !== 'undefined' ? r.value : (r == null ? null : r);
-            } catch (e) { return null; }
-        },
-        async set(key, value) {
-            try { if (itemApi) await plugin.setItem(key, String(value)); else await plugin.set({ key, value: String(value) }); } catch (e) {}
-        },
-        async remove(key) {
-            try { if (typeof plugin.removeItem === 'function') await plugin.removeItem(key); else await plugin.remove({ key }); } catch (e) {}
-        },
-        async keys() { try { const r = await plugin.keys(); return Array.isArray(r) ? r : (r && (r.keys || r.value)) || []; } catch (e) { return []; } },
-        async clear() { try { await plugin.clear(); } catch (e) {} }
+        get: (key) => call('get', async () => {
+            if (key == null || key === '') return null;
+            if (shape === 'internal') { const r = await plugin.internalGetItem({ prefixedKey: P + key }); return r && r.data != null ? r.data : null; }
+            if (shape === 'item') { const v = await plugin.getItem(key); return v == null ? null : v; }
+            const r = await plugin.get({ key }); return r && typeof r.value !== 'undefined' ? r.value : (r == null ? null : r);
+        }),
+        set: (key, value) => call('set', async () => {
+            if (key == null || key === '') throw new Error('No key provided');
+            if (shape === 'internal') await plugin.internalSetItem({ prefixedKey: P + key, data: String(value) });
+            else if (shape === 'item') await plugin.setItem(key, String(value));
+            else await plugin.set({ key, value: String(value) });
+        }),
+        remove: (key) => call('remove', async () => {
+            if (key == null || key === '') return;
+            if (shape === 'internal') await plugin.internalRemoveItem({ prefixedKey: P + key });
+            else if (shape === 'item') {
+                if (!has('removeItem')) throw new Error(n + ' plugin has no removeItem(); use $secure.use(adapter)');
+                await plugin.removeItem(key);
+            }
+            else await plugin.remove({ key });
+        }),
+        keys: () => call('keys', async () => {
+            if (shape === 'internal') { const r = await plugin.internalGetPrefixedKeys({ prefix: P }); return ((r && r.keys) || []).map(k => k.slice(P.length)); }
+            const r = await plugin.keys(); return Array.isArray(r) ? r : (r && (r.keys || r.value)) || [];
+        }),
+        clear: () => call('clear', async () => {
+            if (shape === 'internal') await plugin.internalClearItemsWithPrefix({ prefix: P });
+            else await plugin.clear();
+        })
     };
 }
 
 let _manifestSecureBackend = null;
 function manifestSecureBackend() {
     if (_manifestSecureBackend) return _manifestSecureBackend;
-    const plugin = manifestNativePlugin('SecureStorage');
-    _manifestSecureBackend = plugin ? manifestSecureNativeBackend(plugin) : manifestSecureWebBackend();
+    const plugin = manifestNativeIsNative() ? manifestNativePlugin('SecureStorage') : null;
+    _manifestSecureBackend = plugin ? manifestSecureNativeBackend(plugin, 'SecureStorage') : manifestSecureWebBackend();
     return _manifestSecureBackend;
 }
 
@@ -251,7 +299,7 @@ function initManifestLinks() {
         get last() { const s = window.Alpine.store('links'); return s ? s.last : null; }
     }));
 
-    const App = manifestNativePlugin('App');
+    const App = manifestNativeUse('App', 'getLaunchUrl');
     if (App) {
         try { App.addListener('appUrlOpen', (data) => { if (data && data.url) manifestHandleUrl(data.url); }); } catch (e) {}
         try { App.getLaunchUrl().then(r => { if (r && r.url) manifestHandleUrl(r.url); }).catch(() => {}); } catch (e) {}
@@ -298,7 +346,7 @@ function initManifestPush() {
         window.Alpine.store('push', store);
     }
 
-    const Push = manifestNativePlugin('PushNotifications');
+    const Push = manifestNativeUse('PushNotifications', 'register');
     if (Push) {
         try { Push.addListener('registration', t => { store.token = t && t.value; _manifestPushTokenHandlers.forEach(fn => { try { fn(store.token); } catch (e) {} }); }); } catch (e) {}
         try { Push.addListener('pushNotificationReceived', n => { _manifestPushReceiveHandlers.forEach(fn => { try { fn(n); } catch (e) {} }); }); } catch (e) {}
@@ -307,13 +355,13 @@ function initManifestPush() {
 
     window.Alpine.magic('push', () => ({
         async request() {
-            const P = manifestNativePlugin('PushNotifications');
+            const P = manifestNativeUse('PushNotifications', 'requestPermissions');
             if (P) { try { const r = await P.requestPermissions(); const p = manifestPushMapPermission(r && r.receive); window.Alpine.store('push').permission = p; return p; } catch (e) { return 'denied'; } }
             if (typeof Notification !== 'undefined' && Notification.requestPermission) { try { const p = manifestPushMapPermission(await Notification.requestPermission()); window.Alpine.store('push').permission = p; return p; } catch (e) { return 'denied'; } }
             return 'unsupported';
         },
         async register() {
-            const P = manifestNativePlugin('PushNotifications');
+            const P = manifestNativeUse('PushNotifications', 'register');
             if (P) { try { await P.register(); } catch (e) {} }
         },
         onToken(fn) { if (typeof fn === 'function') _manifestPushTokenHandlers.push(fn); },
@@ -341,7 +389,7 @@ function initManifestApp() {
     const visible = (typeof document !== 'undefined') ? document.visibilityState !== 'hidden' : true;
     if (!window.Alpine.store('app')) window.Alpine.store('app', { active: visible });
 
-    const App = manifestNativePlugin('App');
+    const App = manifestNativeUse('App', 'getState');
     if (App) {
         try { App.addListener('appStateChange', s => manifestAppSetActive(s && s.isActive)); } catch (e) {}
     } else if (typeof document !== 'undefined') {
@@ -369,22 +417,22 @@ function manifestVibrate(pattern) {
 function initManifestHaptics() {
     window.Alpine.magic('haptics', () => ({
         impact(style) {
-            const H = manifestNativePlugin('Haptics');
+            const H = manifestNativeUse('Haptics', 'impact');
             if (H) { try { return H.impact({ style: style || 'MEDIUM' }); } catch (e) {} }
             manifestVibrate(10); return Promise.resolve();
         },
         notification(type) {
-            const H = manifestNativePlugin('Haptics');
+            const H = manifestNativeUse('Haptics', 'notification');
             if (H) { try { return H.notification({ type: type || 'SUCCESS' }); } catch (e) {} }
             manifestVibrate([10, 40, 10]); return Promise.resolve();
         },
         selection() {
-            const H = manifestNativePlugin('Haptics');
+            const H = manifestNativeUse('Haptics', 'selectionChanged');
             if (H) { try { return H.selectionChanged(); } catch (e) {} }
             manifestVibrate(5); return Promise.resolve();
         },
         vibrate(ms) {
-            const H = manifestNativePlugin('Haptics');
+            const H = manifestNativeUse('Haptics', 'vibrate');
             if (H) { try { return H.vibrate({ duration: ms || 300 }); } catch (e) {} }
             manifestVibrate(ms || 300); return Promise.resolve();
         }
@@ -392,33 +440,57 @@ function initManifestHaptics() {
 }
 
 
-// $biometric — Face ID / Touch ID. Native: a Capacitor biometric plugin
-// (BiometricAuth or NativeBiometric; method shapes differ, adapted below). The web
-// has no equivalent one-shot verify (WebAuthn is a separate server ceremony), so
-// available() is false and verify() reports unsupported — a genuine native win.
+// $biometric — Face ID / Touch ID. Native: @aparajita/capacitor-biometric-auth
+// (BiometricAuthNative) or @capgo/capacitor-native-biometric (NativeBiometric).
+// No web equivalent: available() is false and verify() reports unsupported.
+
+const MANIFEST_BIOMETRIC_PLUGINS = ['BiometricAuthNative', 'BiometricAuth', 'NativeBiometric'];
 
+// Native only: bundled web builds expose plugin web stubs that always "verify".
 function manifestBiometricPlugin() {
-    return manifestNativePlugin('BiometricAuth') || manifestNativePlugin('NativeBiometric') || null;
+    if (!manifestNativeIsNative()) return null;
+    for (const name of MANIFEST_BIOMETRIC_PLUGINS) {
+        const plugin = manifestNativePlugin(name);
+        if (plugin) return { name, plugin };
+    }
+    return null;
+}
+
+function manifestBiometricWarn(msg, e) {
+    try { console.warn('[Manifest] $biometric: ' + msg, e || ''); } catch (_) {}
 }
 
 async function manifestBiometricAvailable() {
-    const B = manifestBiometricPlugin();
-    if (!B) return false;
+    const found = manifestBiometricPlugin();
+    if (!found) return false;
+    const { name, plugin: B } = found;
     try {
-        if (typeof B.checkBiometry === 'function') { const r = await B.checkBiometry(); return !!(r && r.isAvailable); }
-        if (typeof B.isAvailable === 'function') { const r = await B.isAvailable(); return !!(r && r.isAvailable !== false); }
-    } catch (e) {}
+        if (manifestNativeHas(name, B, 'checkBiometry')) { const r = await B.checkBiometry(); return !!(r && r.isAvailable); }
+        if (manifestNativeHas(name, B, 'isAvailable')) { const r = await B.isAvailable(); return !!(r && r.isAvailable !== false); }
+    } catch (e) { manifestBiometricWarn('availability check failed', e); return false; }
+    manifestBiometricWarn(name + ' has no checkBiometry() or isAvailable()');
     return false;
 }
 
 async function manifestBiometricVerify(opts) {
     const o = opts || {};
-    const B = manifestBiometricPlugin();
-    if (!B) return { verified: false, error: 'unsupported' };
+    const found = manifestBiometricPlugin();
+    if (!found) return { verified: false, error: 'unsupported' };
+    const { name, plugin: B } = found;
     try {
-        if (typeof B.authenticate === 'function') { await B.authenticate({ reason: o.reason, title: o.title, subtitle: o.subtitle, cancelTitle: o.cancelTitle }); return { verified: true }; }
-        if (typeof B.verifyIdentity === 'function') { await B.verifyIdentity({ reason: o.reason, title: o.title, subtitle: o.subtitle }); return { verified: true }; }
-    } catch (e) { return { verified: false, error: (e && (e.message || e.code)) || 'failed' }; }
+        // aparajita: native method + its own option names
+        if (manifestNativeHas(name, B, 'internalAuthenticate') || manifestNativeHas(name, B, 'authenticate')) {
+            const args = { reason: o.reason, cancelTitle: o.cancelTitle, iosFallbackTitle: o.fallbackTitle, androidTitle: o.title, androidSubtitle: o.subtitle, allowDeviceCredential: o.allowDeviceCredential };
+            if (manifestNativeHas(name, B, 'internalAuthenticate')) await B.internalAuthenticate(args);
+            else await B.authenticate(args);
+            return { verified: true };
+        }
+        if (manifestNativeHas(name, B, 'verifyIdentity')) {
+            await B.verifyIdentity({ reason: o.reason, description: o.reason, title: o.title, subtitle: o.subtitle, negativeButtonText: o.cancelTitle, useFallback: !!o.allowDeviceCredential, fallbackTitle: o.fallbackTitle });
+            return { verified: true };
+        }
+    } catch (e) { return { verified: false, error: (e && (e.message || e.code)) || 'failed', code: (e && e.code) || undefined }; }
+    manifestBiometricWarn(name + ' has no supported verify method');
     return { verified: false, error: 'unsupported' };
 }
 
@@ -471,7 +543,7 @@ function manifestCameraWeb(opts) {
 
 function manifestCameraPhoto(opts) {
     const o = opts || {};
-    const Cam = manifestNativePlugin('Camera');
+    const Cam = manifestNativeUse('Camera', 'getPhoto');
     if (Cam) {
         return Cam.getPhoto({ resultType: 'dataUrl', source: o.source === 'photos' ? 'PHOTOS' : 'CAMERA', quality: o.quality || 90 })
             .then(r => ({ dataUrl: r && (r.dataUrl || r.webPath), format: r && r.format }))

package/lib/manifest.sw.js

@@ -16,7 +16,7 @@
 
 // Build stamps the published version here; unstamped (dev) falls back to the
 // registration URL's `v`, then 'dev'.
-const BUILD_VERSION = '0.5.249';
+const BUILD_VERSION = '0.5.251';
 const CACHE_PREFIX = 'mnfst-sw:';
 const META_CACHE = CACHE_PREFIX + 'meta';
 // Sized to hold a full precache.json warm-up (PRECACHE_MAX_ENTRIES server-side)

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "mnfst",
-    "version": "0.5.249",
+    "version": "0.5.251",
     "private": false,
     "workspaces": [
         "templates/starter",