mnfst 0.5.253 → 0.5.255

package/lib/manifest.appwrite.data.js

@@ -2,7 +2,7 @@
 
 (function () {
 
-const MANIFEST_BUILD_VERSION = '0.5.253';
+const MANIFEST_BUILD_VERSION = '0.5.255';
 
 /* Manifest Data Sources - Appwrite Integration */
 

package/lib/manifest.data.js

@@ -2,7 +2,7 @@
 
 (function () {
 
-const MANIFEST_BUILD_VERSION = '0.5.253';
+const MANIFEST_BUILD_VERSION = '0.5.255';
 
 /* Manifest Data Sources - Configuration */
 

package/lib/manifest.device.js

@@ -15,6 +15,11 @@ function manifestNativePlugin(name) {
     const cap = window.Capacitor;
     return (cap && cap.Plugins && cap.Plugins[name]) || null;
 }
+// Whether a plugin is in the native header list (no list: assume installed)
+function manifestNativeInstalled(name) {
+    const headers = window.Capacitor && window.Capacitor.PluginHeaders;
+    return !Array.isArray(headers) || headers.some(h => h && h.name === name);
+}
 // Whether a plugin exposes a native method. Bundled apps get a registerPlugin
 // Proxy where every property is a function, so prefer the native header; a
 // header list without this plugin means it isn't installed natively.
@@ -158,6 +163,7 @@ function initManifestNativeNetwork() {
 // namespaced localStorage fallback on the web. Intended for session tokens etc.
 // Native: a plugin registered as SecureStorage (@aparajita/capacitor-secure-storage,
 // or any getItem/setItem or get/set shape); $secure.use(adapter) overrides.
+// Native without a plugin rejects; never localStorage.
 // The web fallback is NOT encrypted — it degrades honestly, not securely.
 
 const MANIFEST_SECURE_NS = 'mnfst:';
@@ -228,12 +234,32 @@ function manifestSecureNativeBackend(plugin, name) {
     };
 }
 
+const MANIFEST_SECURE_NONE = 'No secure-storage plugin is installed; install @aparajita/capacitor-secure-storage and run npx cap sync, or provide one with $secure.use(adapter)';
+const MANIFEST_SECURE_UNSYNCED = 'SecureStorage plugin is not installed natively; run npx cap sync';
+
+// Rejects every call, logs once; never falls back to unencrypted web storage
+let _manifestSecureMissingLogged = false;
+function manifestSecureMissingBackend(msg) {
+    const fail = (op) => async () => {
+        const e = new Error(msg);
+        if (!_manifestSecureMissingLogged) {
+            _manifestSecureMissingLogged = true;
+            try { console.error('[Manifest] $secure.' + op + ' failed', e); } catch (_) {}
+        }
+        throw e;
+    };
+    return { get: fail('get'), set: fail('set'), remove: fail('remove'), keys: fail('keys'), clear: fail('clear') };
+}
+
+// Missing backends aren't cached, so a later-registered plugin is picked up
 let _manifestSecureBackend = null;
 function manifestSecureBackend() {
     if (_manifestSecureBackend) return _manifestSecureBackend;
-    const plugin = manifestNativeIsNative() ? manifestNativePlugin('SecureStorage') : null;
-    _manifestSecureBackend = plugin ? manifestSecureNativeBackend(plugin, 'SecureStorage') : manifestSecureWebBackend();
-    return _manifestSecureBackend;
+    if (!manifestNativeIsNative()) return (_manifestSecureBackend = manifestSecureWebBackend());
+    const plugin = manifestNativePlugin('SecureStorage');
+    if (!plugin) return manifestSecureMissingBackend(MANIFEST_SECURE_NONE);
+    if (!manifestNativeInstalled('SecureStorage')) return manifestSecureMissingBackend(MANIFEST_SECURE_UNSYNCED);
+    return (_manifestSecureBackend = manifestSecureNativeBackend(plugin, 'SecureStorage'));
 }
 
 function initManifestSecure() {
@@ -456,6 +482,7 @@ function manifestBiometricPlugin() {
             const plugin = manifestNativePlugin(name);
             if (plugin && headers.some(h => h && h.name === name)) return { name, plugin };
         }
+        manifestBiometricWarnNotNative();
         return null;
     }
     for (const name of MANIFEST_BIOMETRIC_PLUGINS) {
@@ -469,6 +496,16 @@ function manifestBiometricWarn(msg, e) {
     try { console.warn('[Manifest] $biometric: ' + msg, e || ''); } catch (_) {}
 }
 
+// Registered in JS but missing from the native build: warn once
+let manifestBiometricNotNativeWarned = false;
+function manifestBiometricWarnNotNative() {
+    if (manifestBiometricNotNativeWarned) return;
+    const missing = MANIFEST_BIOMETRIC_PLUGINS.filter(n => manifestNativePlugin(n));
+    if (!missing.length) return;
+    manifestBiometricNotNativeWarned = true;
+    manifestBiometricWarn(missing.join(', ') + ' registered but not installed natively; run npx cap sync');
+}
+
 async function manifestBiometricAvailable() {
     const found = manifestBiometricPlugin();
     if (!found) return false;

package/lib/manifest.integrity.json

@@ -1,6 +1,6 @@
 {
   "manifest.appwrite.auth.js": "sha384-dsIWnH0qCAGSzAXMGrd8fvOrVl4tOIE6j5tC35JPTrQXZ56qLD36ARyvhR7vi3Id",
-  "manifest.appwrite.data.js": "sha384-xxVLbIAAzMs+ksXTzRGtu0GxALohKKkFRXsvLyp6BvZesTk/JsS0lscvkIcOyGO1",
+  "manifest.appwrite.data.js": "sha384-yrebKnrOCvLdXPLHxIVM+y6rKpj9Wz9Jj3m+vhiRm9t8WHxZ4a2I82Qm6dS4wEbd",
   "manifest.appwrite.presences.js": "sha384-JyVDWFT69b7Svq8J8p9tNWe2v9PZNQBY5UyhtOl1vnuHFAX0CRQ3MA9SiKq5wzNh",
   "manifest.bindings.js": "sha384-lPtMf8Ykaic9gNVZKq8Scia1881ZeMAyxer3WCIkUNwwrgzGBWto1OXADUwjvORF",
   "manifest.charts.js": "sha384-G+huD7UvjF9zDovdVVlh4I5X1Mq4oNnJfoFg4NnGdP3R/4Skq9hy5cGuHNYLxDYm",
@@ -11,24 +11,24 @@
   "manifest.combobox.js": "sha384-MILTkrgsTzsYUjGo4ZuADqV85Xs4GmfB4xexfe9vbJMIoQTZ42W4zs+DTaVSPEsx",
   "manifest.components.js": "sha384-BUFA8h+G5Plr82sV7bKzO42pPoiRZwRQcKj1lt2ROFiKjjlkayU/vmkAFqEsdBA+",
   "manifest.computed.js": "sha384-GYML/e81gQfN+iDbqhPUgny8bINCyL+SrbTofoGk4hlCnLLjv51mCv42JMqq+ku5",
-  "manifest.data.js": "sha384-apX4l/k05t8snFyKYLbMbN+kG6xjHHI8gbs32376S3WruzynLOaF+uq43cCGfifp",
+  "manifest.data.js": "sha384-5nHLnVnm5kj2/Z3chAJ2bAwuNsfzJ8O3qtI7ctAQE7v0CW0rl3q4IwFVQ7btoSoT",
   "manifest.datepicker.js": "sha384-2XwFFnS4Bg5FDvG/v8x6KUvrjcBQEOYyTxynX2K/D/Qb3PI6+Y04lEwCnVDJLzwL",
   "manifest.defer.js": "sha384-GK9qJkYtchtyzSQ+3zmDQUJE3+au4qthT2M8JnFjXxgfwCH5IVKc2r3tackgMryU",
-  "manifest.device.js": "sha384-jY+Xjt/v4I7SWTFzIGdPRJRTl634i6pj5T6jQaEn9keNTccPGD9lAIbYWq4J8oc7",
+  "manifest.device.js": "sha384-AWismZl/UjR/NqH7z4Sfg0DZLPpySDuS0tL34ZsbHdNYDD14JzBW9xp/ScmQKilQ",
   "manifest.dropdowns.js": "sha384-acufUps7R9WjqB4XXW5JLACqniuHJGM4CNTb2rF4B2Q/jv7ZRmsAwfr2McanOz3s",
   "manifest.edit.js": "sha384-MOgQNdNLeHijhR0u2W6ntoOulKFglsATCFDqkinesOU15tHoILk/JNzHKkGi5dUG",
   "manifest.export.js": "sha384-Rx6XvqBZc4apzP/FwcDr6yIln4/zNa08Q4ZqBZcEqUz1aNZQfl4h0+Ae7mqCQyuG",
   "manifest.icons.js": "sha384-kKOINpX70YzNO3FvkV6umrmO3f0KIu0DNbwB+ej55a7y/lhU7v/myQtXL0bwCTbt",
   "manifest.localization.js": "sha384-EImsIw8Z3l13V5eH9ZJF/yfsOfIvR1oPRNSArANkPji7V8O3IRf6zMwsNiAGj3Hk",
   "manifest.markdown.js": "sha384-heyDR40LXHaAmAuA+fa381uFwShk1oAqpFFY6E2Qq4T3VN0TQfRqyc++MF40K5Hj",
-  "manifest.native.js": "sha384-jY+Xjt/v4I7SWTFzIGdPRJRTl634i6pj5T6jQaEn9keNTccPGD9lAIbYWq4J8oc7",
+  "manifest.native.js": "sha384-AWismZl/UjR/NqH7z4Sfg0DZLPpySDuS0tL34ZsbHdNYDD14JzBW9xp/ScmQKilQ",
   "manifest.payments.js": "sha384-8pofk2zhxtapPMpwnFyTelPMrYhShNhDCE722uQh/EYFvZFuPLmSdgunqsarVQjv",
   "manifest.rich.text.js": "sha384-ZBV9jXmu2nmprEHicddRE/m7nR4RPZtVc969Jte0+EJYBcVph7itkjcgN/61PyeC",
   "manifest.router.js": "sha384-9LMIkwrgnxmmFDv70TND2MRJF1z6Nl4yqG7fH5DbJ8oUIhdu/u4yUPSime1/EYhP",
   "manifest.slides.js": "sha384-3uRTkyK9XPLmnxI2+igZlpi4EyPlU/7IHj5j3BZJJ2KN455vXyk99fiXV3feO/XY",
   "manifest.status.js": "sha384-MBO345ab7H6Uq1X2dZLt4Ge1Gcra+Z2qYApvlAeIV8CJhDDJrz2FPXpp+Kcp8zcM",
   "manifest.svg.js": "sha384-qr/8H9+2cIhSXNbRWRtIdrDlTOxKlNJqwEefHvCYoiBNW/kKhPTFa109Orv/EBnb",
-  "manifest.sw.js": "sha384-9Kcczuh7GSCImjjTu09aZ0C/EaVHItZ0McwTdNqv1ZCWZe0UfUn9+IYX3ISYE0kk",
+  "manifest.sw.js": "sha384-IqZgkKzUzqXEsiCpqYTUCm3ETLkB8eAVkEN8vMnHXTXxmMLvKk7cwixxZ9WkUzP2",
   "manifest.tabs.js": "sha384-otU09H7jnawVKQdLAYpMCd3jx00tgyPVr42D2hLIBzN5dG4se505YesavdnMqEi1",
   "manifest.tailwind.js": "sha384-r/Jvqb+Piz21jUts10BbVAJoKkShOdJRVFpywyi4HPIi/OfOJq5CtPyWAPbdkMgt",
   "manifest.toasts.js": "sha384-3zkWxzw693pxg3QDFsoYCA3CqYaLKmBaMArULXODD66Utolpewl0OAeTB92aWUVv",

package/lib/manifest.native.js

@@ -15,6 +15,11 @@ function manifestNativePlugin(name) {
     const cap = window.Capacitor;
     return (cap && cap.Plugins && cap.Plugins[name]) || null;
 }
+// Whether a plugin is in the native header list (no list: assume installed)
+function manifestNativeInstalled(name) {
+    const headers = window.Capacitor && window.Capacitor.PluginHeaders;
+    return !Array.isArray(headers) || headers.some(h => h && h.name === name);
+}
 // Whether a plugin exposes a native method. Bundled apps get a registerPlugin
 // Proxy where every property is a function, so prefer the native header; a
 // header list without this plugin means it isn't installed natively.
@@ -158,6 +163,7 @@ function initManifestNativeNetwork() {
 // namespaced localStorage fallback on the web. Intended for session tokens etc.
 // Native: a plugin registered as SecureStorage (@aparajita/capacitor-secure-storage,
 // or any getItem/setItem or get/set shape); $secure.use(adapter) overrides.
+// Native without a plugin rejects; never localStorage.
 // The web fallback is NOT encrypted — it degrades honestly, not securely.
 
 const MANIFEST_SECURE_NS = 'mnfst:';
@@ -228,12 +234,32 @@ function manifestSecureNativeBackend(plugin, name) {
     };
 }
 
+const MANIFEST_SECURE_NONE = 'No secure-storage plugin is installed; install @aparajita/capacitor-secure-storage and run npx cap sync, or provide one with $secure.use(adapter)';
+const MANIFEST_SECURE_UNSYNCED = 'SecureStorage plugin is not installed natively; run npx cap sync';
+
+// Rejects every call, logs once; never falls back to unencrypted web storage
+let _manifestSecureMissingLogged = false;
+function manifestSecureMissingBackend(msg) {
+    const fail = (op) => async () => {
+        const e = new Error(msg);
+        if (!_manifestSecureMissingLogged) {
+            _manifestSecureMissingLogged = true;
+            try { console.error('[Manifest] $secure.' + op + ' failed', e); } catch (_) {}
+        }
+        throw e;
+    };
+    return { get: fail('get'), set: fail('set'), remove: fail('remove'), keys: fail('keys'), clear: fail('clear') };
+}
+
+// Missing backends aren't cached, so a later-registered plugin is picked up
 let _manifestSecureBackend = null;
 function manifestSecureBackend() {
     if (_manifestSecureBackend) return _manifestSecureBackend;
-    const plugin = manifestNativeIsNative() ? manifestNativePlugin('SecureStorage') : null;
-    _manifestSecureBackend = plugin ? manifestSecureNativeBackend(plugin, 'SecureStorage') : manifestSecureWebBackend();
-    return _manifestSecureBackend;
+    if (!manifestNativeIsNative()) return (_manifestSecureBackend = manifestSecureWebBackend());
+    const plugin = manifestNativePlugin('SecureStorage');
+    if (!plugin) return manifestSecureMissingBackend(MANIFEST_SECURE_NONE);
+    if (!manifestNativeInstalled('SecureStorage')) return manifestSecureMissingBackend(MANIFEST_SECURE_UNSYNCED);
+    return (_manifestSecureBackend = manifestSecureNativeBackend(plugin, 'SecureStorage'));
 }
 
 function initManifestSecure() {
@@ -456,6 +482,7 @@ function manifestBiometricPlugin() {
             const plugin = manifestNativePlugin(name);
             if (plugin && headers.some(h => h && h.name === name)) return { name, plugin };
         }
+        manifestBiometricWarnNotNative();
         return null;
     }
     for (const name of MANIFEST_BIOMETRIC_PLUGINS) {
@@ -469,6 +496,16 @@ function manifestBiometricWarn(msg, e) {
     try { console.warn('[Manifest] $biometric: ' + msg, e || ''); } catch (_) {}
 }
 
+// Registered in JS but missing from the native build: warn once
+let manifestBiometricNotNativeWarned = false;
+function manifestBiometricWarnNotNative() {
+    if (manifestBiometricNotNativeWarned) return;
+    const missing = MANIFEST_BIOMETRIC_PLUGINS.filter(n => manifestNativePlugin(n));
+    if (!missing.length) return;
+    manifestBiometricNotNativeWarned = true;
+    manifestBiometricWarn(missing.join(', ') + ' registered but not installed natively; run npx cap sync');
+}
+
 async function manifestBiometricAvailable() {
     const found = manifestBiometricPlugin();
     if (!found) return false;

package/lib/manifest.sw.js

@@ -16,7 +16,7 @@
 
 // Build stamps the published version here; unstamped (dev) falls back to the
 // registration URL's `v`, then 'dev'.
-const BUILD_VERSION = '0.5.253';
+const BUILD_VERSION = '0.5.255';
 const CACHE_PREFIX = 'mnfst-sw:';
 const META_CACHE = CACHE_PREFIX + 'meta';
 // Sized to hold a full precache.json warm-up (PRECACHE_MAX_ENTRIES server-side)

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "mnfst",
-    "version": "0.5.253",
+    "version": "0.5.255",
     "private": false,
     "workspaces": [
         "templates/starter",