mnfst 0.5.254 → 0.5.256

package/lib/manifest.native.js

@@ -15,6 +15,11 @@ function manifestNativePlugin(name) {
     const cap = window.Capacitor;
     return (cap && cap.Plugins && cap.Plugins[name]) || null;
 }
+// Whether a plugin is in the native header list (no list: assume installed)
+function manifestNativeInstalled(name) {
+    const headers = window.Capacitor && window.Capacitor.PluginHeaders;
+    return !Array.isArray(headers) || headers.some(h => h && h.name === name);
+}
 // Whether a plugin exposes a native method. Bundled apps get a registerPlugin
 // Proxy where every property is a function, so prefer the native header; a
 // header list without this plugin means it isn't installed natively.
@@ -158,6 +163,7 @@ function initManifestNativeNetwork() {
 // namespaced localStorage fallback on the web. Intended for session tokens etc.
 // Native: a plugin registered as SecureStorage (@aparajita/capacitor-secure-storage,
 // or any getItem/setItem or get/set shape); $secure.use(adapter) overrides.
+// Native without a plugin rejects; never localStorage.
 // The web fallback is NOT encrypted — it degrades honestly, not securely.
 
 const MANIFEST_SECURE_NS = 'mnfst:';
@@ -228,25 +234,32 @@ function manifestSecureNativeBackend(plugin, name) {
     };
 }
 
-// Registered in JS but absent from the native header list
-function manifestSecureInstalled(name) {
-    const headers = window.Capacitor && window.Capacitor.PluginHeaders;
-    return !Array.isArray(headers) || headers.some(h => h && h.name === name);
-}
+const MANIFEST_SECURE_NONE = 'No secure-storage plugin is installed; install @aparajita/capacitor-secure-storage and run npx cap sync, or provide one with $secure.use(adapter)';
+const MANIFEST_SECURE_UNSYNCED = 'SecureStorage plugin is not installed natively; run npx cap sync';
 
-// Rejects every call; never falls back to unencrypted web storage
-function manifestSecureMissingBackend(name) {
-    const fail = (op) => async () => manifestSecureFail(op, new Error(name + ' plugin is not installed natively; run npx cap sync'));
+// Rejects every call, logs once; never falls back to unencrypted web storage
+let _manifestSecureMissingLogged = false;
+function manifestSecureMissingBackend(msg) {
+    const fail = (op) => async () => {
+        const e = new Error(msg);
+        if (!_manifestSecureMissingLogged) {
+            _manifestSecureMissingLogged = true;
+            try { console.error('[Manifest] $secure.' + op + ' failed', e); } catch (_) {}
+        }
+        throw e;
+    };
     return { get: fail('get'), set: fail('set'), remove: fail('remove'), keys: fail('keys'), clear: fail('clear') };
 }
 
+// Missing backends aren't cached, so a later-registered plugin is picked up
 let _manifestSecureBackend = null;
 function manifestSecureBackend() {
     if (_manifestSecureBackend) return _manifestSecureBackend;
-    const plugin = manifestNativeIsNative() ? manifestNativePlugin('SecureStorage') : null;
-    if (plugin && !manifestSecureInstalled('SecureStorage')) return manifestSecureMissingBackend('SecureStorage');
-    _manifestSecureBackend = plugin ? manifestSecureNativeBackend(plugin, 'SecureStorage') : manifestSecureWebBackend();
-    return _manifestSecureBackend;
+    if (!manifestNativeIsNative()) return (_manifestSecureBackend = manifestSecureWebBackend());
+    const plugin = manifestNativePlugin('SecureStorage');
+    if (!plugin) return manifestSecureMissingBackend(MANIFEST_SECURE_NONE);
+    if (!manifestNativeInstalled('SecureStorage')) return manifestSecureMissingBackend(MANIFEST_SECURE_UNSYNCED);
+    return (_manifestSecureBackend = manifestSecureNativeBackend(plugin, 'SecureStorage'));
 }
 
 function initManifestSecure() {

package/lib/manifest.schema.json

@@ -396,6 +396,23 @@
                     "type": "string",
                     "description": "May reference an env var via ${VAR_NAME}."
                 },
+                "presences": {
+                    "description": "Enable the $presence plugin (Appwrite Presences): true, or an options object.",
+                    "oneOf": [
+                        {
+                            "type": "boolean"
+                        },
+                        {
+                            "type": "object",
+                            "properties": {
+                                "scope": {
+                                    "type": "string",
+                                    "description": "Roster scope: 'auto'/'team' (current team when one is active, default), 'global', or an explicit team id. May reference an env var via ${VAR_NAME}."
+                                }
+                            }
+                        }
+                    ]
+                },
                 "auth": {
                     "type": "object",
                     "properties": {

package/lib/manifest.sw.js

@@ -16,7 +16,7 @@
 
 // Build stamps the published version here; unstamped (dev) falls back to the
 // registration URL's `v`, then 'dev'.
-const BUILD_VERSION = '0.5.254';
+const BUILD_VERSION = '0.5.256';
 const CACHE_PREFIX = 'mnfst-sw:';
 const META_CACHE = CACHE_PREFIX + 'meta';
 // Sized to hold a full precache.json warm-up (PRECACHE_MAX_ENTRIES server-side)

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "mnfst",
-    "version": "0.5.254",
+    "version": "0.5.256",
     "private": false,
     "workspaces": [
         "templates/starter",