mnfst 0.5.257 → 0.5.259

package/lib/manifest.appwrite.data.js

@@ -2,7 +2,7 @@
 
 (function () {
 
-const MANIFEST_BUILD_VERSION = '0.5.257';
+const MANIFEST_BUILD_VERSION = '0.5.259';
 
 /* Manifest Data Sources - Appwrite Integration */
 

package/lib/manifest.appwrite.presences.js

@@ -298,8 +298,7 @@ if (!window.ManifestRealtimeHub) {
         status: 'online',
         metadata: null,
         scope: 'auto',          // 'auto'/'team' = current team, 'global', or an explicit team id
-        teamsEnabled: false,    // manifest.appwrite.auth.teams (read at start)
-        settleTimer: null,      // bounded wait for teams to settle
+        teamsEnabled: false,    // manifest.appwrite.auth.teams (read in ensureServices)
         auto: true,             // focus/blur auto-flip
         heartbeatMs: 25000,     // TTL refresh cadence
         onFocus: null,
@@ -363,6 +362,12 @@ if (!window.ManifestRealtimeHub) {
         if (!A || !A.Presences || !A.Realtime || !window.ManifestRealtimeHub) return false;
         const services = await window.ManifestAppwriteAuthConfig?.getAppwriteClient?.();
         if (!services?.client) return false;
+        // teamsEnabled gates the scoped (never-users()) grant: resolve it here
+        // so pre-start set() writes are covered, not only start()
+        try {
+            const authCfg = await window.ManifestAppwriteAuthConfig?.getAppwriteConfig?.();
+            ctx.teamsEnabled = !!authCfg?.teams;
+        } catch (e) { ctx.teamsEnabled = false; }
         ctx.client = services.client;
         ctx.presences = new A.Presences(services.client);
         return true;
@@ -370,23 +375,6 @@ if (!window.ManifestRealtimeHub) {
 
     /* Scope */
 
-    // Teams load in the background after auth init; until they settle, a scoped
-    // write must not fall back to read(users()) — that is the cross-tenant
-    // broadcast window. Settles on the auth event, or after a bounded wait for
-    // sessions the background load never covers (e.g. guests without guestTeams).
-    let teamsSettled = false;
-    window.addEventListener('manifest:auth:teams-loaded', () => { settleTeams(); });
-    ['manifest:auth:logout', 'manifest:auth:session-cleared', 'manifest:auth:login', 'manifest:auth:anonymous'].forEach(type =>
-        window.addEventListener(type, () => { teamsSettled = false; }));
-    function settleTeams() {
-        if (teamsSettled) return;
-        teamsSettled = true;
-        if (ctx.settleTimer) { clearTimeout(ctx.settleTimer); ctx.settleTimer = null; }
-        // Settled with a team: the team-switch effect rescopes. Settled with
-        // none: rewrite here, from self-only to the global users() grant.
-        if (ctx.started && !scopeTeamId()) { hydrate(); rescope(); }
-    }
-
     // Roster scope as a team id: explicit id > current team ('auto'/'team') > none ('global')
     function scopeTeamId() {
         const s = ctx.scope;
@@ -491,13 +479,13 @@ if (!window.ManifestRealtimeHub) {
         ctx.metadata = metadata !== undefined ? metadata : ctx.metadata;
 
         // Read-scope + owner write (owner update/delete required, else updates 401).
-        // Reads follow the roster scope: team role when scoped, all users when
-        // global. Scoped with teams NOT yet settled: self-only — never the
-        // users() broadcast (the leak window); settle/team-switch rewrites it.
+        // Scoped (teams enabled, scope not global): team grant when resolved,
+        // self-only until then — however long teams take — never the users()
+        // broadcast. users() is only for global scope or teams-disabled projects.
+        // The team-switch effect rescopes reactively when a team resolves/changes.
         const teamId = scopeTeamId();
-        const pending = !teamId && ctx.teamsEnabled && !teamsSettled
-            && ctx.scope !== 'global' && ctx.scope !== false;
-        const readRole = teamId ? A.Role.team(teamId) : (pending ? A.Role.user(user.$id) : A.Role.users());
+        const scoped = ctx.teamsEnabled && ctx.scope !== 'global' && ctx.scope !== false && ctx.scope != null;
+        const readRole = teamId ? A.Role.team(teamId) : (scoped ? A.Role.user(user.$id) : A.Role.users());
         const permissions = [
             A.Permission.read(readRole),
             A.Permission.update(A.Role.user(user.$id)),
@@ -566,18 +554,6 @@ if (!window.ManifestRealtimeHub) {
         if (!(await ensureServices())) { if (s) s.error = 'Appwrite Presences unavailable'; return false; }
         if (ctx.started) return true;
 
-        // Teams settle via the auth plugin's background load; disabled teams or
-        // an already-active team settle now, and a bounded wait covers sessions
-        // the load never fires for (e.g. guests without guestTeams)
-        try {
-            const authCfg = await window.ManifestAppwriteAuthConfig?.getAppwriteConfig?.();
-            ctx.teamsEnabled = !!authCfg?.teams;
-        } catch (e) { ctx.teamsEnabled = false; }
-        if (!ctx.teamsEnabled || currentTeamId()) settleTeams();
-        else if (!teamsSettled && !ctx.settleTimer) {
-            ctx.settleTimer = setTimeout(() => { ctx.settleTimer = null; settleTeams(); }, 8000);
-        }
-
         ctx.started = true;
 
         await hydrate();
@@ -600,7 +576,6 @@ if (!window.ManifestRealtimeHub) {
     }
 
     function stop() {
-        if (ctx.settleTimer) { clearTimeout(ctx.settleTimer); ctx.settleTimer = null; }
         if (ctx.heartbeat) { clearInterval(ctx.heartbeat); ctx.heartbeat = null; }
         if (ctx.onBlur) { window.removeEventListener('blur', ctx.onBlur); ctx.onBlur = null; }
         if (ctx.onFocus) { window.removeEventListener('focus', ctx.onFocus); ctx.onFocus = null; }

package/lib/manifest.charts.js

@@ -336,16 +336,19 @@
 				},
 
 				activate() {
-					if (this.active) return;
+					if (this.active || this.disposed) return;
 					this.active = true;
-					loadD3().then(d3 => { this.d3 = d3; this.bindReactive(); })
+					loadD3().then(d3 => { if (this.disposed) return; this.d3 = d3; this.bindReactive(); })
 						.catch(() => { this.renderError('Chart engine failed to load.'); });
 				},
 
 				bindReactive() {
 					const self = this;
 					const getCfg = self.expression ? Alpine.evaluateLater(self.el, self.expression) : null;
-					Alpine.effect(() => {
+					// Kept so cleanup can release it: an unreleased Alpine.effect stays subscribed
+					// to the long-lived data store, which pins this state, its element and the
+					// whole destroyed subtree for the life of the page (and keeps redrawing it).
+					self._effect = Alpine.effect(() => {
 						// Subscribe to the data store heartbeat so $x loads/locale reloads re-run.
 						try { void Alpine.store('data')?._dataVersion; } catch (_) { }
 						// Every effect fire re-evaluates the expression (it may read live reactive
@@ -393,7 +396,8 @@
 							try { console.warn('[Manifest Charts] "' + (this.el.id || this.expression || 'chart') + '" redrew ' + this._scheduleWindowCount + '+ times within one second — likely a reactive dependency changing on every read (or, for a map, a legitimately busy data feed hitting its per-draw geometry cost).'); } catch (_) { }
 						}
 					}
-					this._t = setTimeout(() => { this._t = null; this.draw(); }, 0);
+					if (this.disposed) return;
+					this._t = setTimeout(() => { this._t = null; if (!this.disposed) this.draw(); }, 0);
 				},
 
 				renderError(msg) { this.el.innerHTML = ''; const d = document.createElement('small'); d.textContent = msg; this.el.appendChild(d); },
@@ -1241,6 +1245,9 @@
 			el.style.minHeight = (hm ? +hm[1] : 240) + 'px';
 			observer().observe(el);
 			cleanup(() => {
+				state.disposed = true;
+				if (state._effect) { Alpine.release(state._effect); state._effect = null; }
+				if (state._t) { clearTimeout(state._t); state._t = null; }
 				if (state._ro) state._ro.disconnect();
 				if (state._onLocale) window.removeEventListener('localechange', state._onLocale);
 				if (io) io.unobserve(el);

package/lib/manifest.data.js

@@ -2,7 +2,7 @@
 
 (function () {
 
-const MANIFEST_BUILD_VERSION = '0.5.257';
+const MANIFEST_BUILD_VERSION = '0.5.259';
 
 /* Manifest Data Sources - Configuration */
 

package/lib/manifest.dropdowns.js

@@ -13,6 +13,31 @@ let lastPointerTarget = null;
 document.addEventListener('keydown', () => { lastInputModality = 'keyboard'; }, true);
 document.addEventListener('pointerdown', (e) => { lastInputModality = 'mouse'; lastPointerTarget = e.target; }, true);
 
+// Context-menu dismiss (click outside / Escape). Module scope on purpose: a closure
+// made inside the directive shares its V8 context with every sibling closure, so it
+// would pin the trigger and, through it, the trigger's whole subtree.
+function bindContextDismiss(menu, signal) {
+    document.addEventListener('pointerdown', (e) => {
+        if (menu.matches(':popover-open') && !menu.contains(e.target)) menu.hidePopover();
+    }, { signal });
+    document.addEventListener('keydown', (e) => {
+        if (e.key === 'Escape' && menu.matches(':popover-open')) {
+            menu.hidePopover();
+            const host = menu._triggerHost;
+            if (host && host.isConnected) host.focus();
+        }
+    }, { signal });
+}
+
+function ensureContextDismiss(menu, owner) {
+    if (menu.__mnfstContextDismissBound) return;
+    menu.__mnfstContextDismissBound = true;
+    const ctxAbort = new AbortController();
+    menu.__mnfstContextAbort = ctxAbort;
+    menu.__mnfstCtxOwner = owner;
+    bindContextDismiss(menu, ctxAbort.signal);
+}
+
 function initializeDropdownPlugin() {
     // Ensure an Alpine context exists. Keep the scope empty — seeding properties
     // collides with author state and the tabs plugin's `tab` property.
@@ -51,18 +76,42 @@ function initializeDropdownPlugin() {
     ensureAlpineContext();
 
     // Register dropdown directive
-    registerDirective('dropdown', (el, { modifiers, expression }, { effect, evaluateLater }) => {
+    registerDirective('dropdown', (el, { modifiers, expression }, { effect, evaluateLater, cleanup }) => {
         let menu;
 
+        // Listeners this trigger adds to things that outlive it (its menu, document)
+        // are bound with this run's signal and aborted when Alpine tears the trigger
+        // down, or when the effect re-runs setup. Without it every re-rendered trigger
+        // left its closures (and through them its whole detached subtree) on the
+        // shared menu / document forever.
+        let runAbort = null;
+        cleanup(() => {
+            if (runAbort) runAbort.abort();
+            runAbort = null;
+            if (menu && menu.__mnfstCtxOwner === el) {
+                menu.__mnfstContextAbort?.abort();
+                menu.__mnfstContextDismissBound = false;
+                menu.__mnfstContextAbort = null;
+                menu.__mnfstCtxOwner = null;
+            }
+            if (menu && menu.__mnfstTrigger === el) menu.__mnfstTrigger = null;
+            if (menu && menu._triggerHost === el) { menu._triggerHost = null; menu._triggerEl = null; }
+        });
+
         // Shared hover state for all dropdown types
         let hoverTimeout;
         let autoCloseTimeout;
         let startAutoCloseTimer;
 
         effect(() => {
+            if (runAbort) runAbort.abort();
+            const runCtl = new AbortController();
+            runAbort = runCtl;
+            const signal = runCtl.signal;
 
             // Defer processing to ensure Alpine is fully ready
             setTimeout(() => {
+                if (signal.aborted) return;
                 if (!window.Alpine) {
                     console.warn('[Manifest] Alpine not available for dropdown processing');
                     return;
@@ -154,7 +203,7 @@ function initializeDropdownPlugin() {
                                 if (window.__manifestComponentsInitialized) {
                                     waitForComponent();
                                 } else {
-                                    window.addEventListener('manifest:components-ready', waitForComponent);
+                                    window.addEventListener('manifest:components-ready', waitForComponent, { once: true, signal });
                                 }
                                 return; // Exit early, setup will happen in waitForComponent
                             }
@@ -174,7 +223,7 @@ function initializeDropdownPlugin() {
                 setupDropdown();
 
                 function setupDropdown() {
-                    if (!menu) return;
+                    if (!menu || signal.aborted) return;
 
                     // Context menus use manual popover (no light-dismiss) to avoid
                     // conflicts with multi-touch trackpad right-click
@@ -299,6 +348,7 @@ function initializeDropdownPlugin() {
                             // (client-reported empty menu) — hydrate the x-defer stash ourselves.
                             if (window.ManifestDefer?.isPending(menu)) window.ManifestDefer.render(menu);
 
+                            ensureContextDismiss(menu, el);
                             if (!menu.matches(':popover-open')) menu.showPopover();
 
                             // Adjust if menu overflows viewport
@@ -384,20 +434,10 @@ function initializeDropdownPlugin() {
 
                         // Document-level dismiss listeners are global — bind once per
                         // menu via an AbortController so reprocessing can't leak them.
-                        if (!menu.__mnfstContextDismissBound) {
-                            menu.__mnfstContextDismissBound = true;
-                            const ctxAbort = new AbortController();
-                            menu.__mnfstContextAbort = ctxAbort;
-                            const { signal } = ctxAbort;
-
-                            // Manual dismiss: click outside or Escape
-                            document.addEventListener('pointerdown', (e) => {
-                                if (menu.matches(':popover-open') && !menu.contains(e.target)) closeContext();
-                            }, { signal });
-                            document.addEventListener('keydown', (e) => {
-                                if (e.key === 'Escape' && menu.matches(':popover-open')) { closeContext(); el.focus(); }
-                            }, { signal });
-                        }
+                        // Bound once per menu, owned by one trigger and released in that
+                        // trigger's cleanup (see top). Any other trigger of the same menu
+                        // re-binds on its next open, so a shared menu never loses dismiss.
+                        ensureContextDismiss(menu, el);
                     }
 
                     // Auto-close on selection: `close` per item, .close for every row
@@ -504,7 +544,7 @@ function initializeDropdownPlugin() {
                                 (e.target.querySelector('a') || e.target).click();
                             }
                         }
-                    });
+                    }, { signal });
 
                     // Make li elements focusable when menu opens
                     menu.addEventListener('toggle', (e) => {
@@ -532,7 +572,7 @@ function initializeDropdownPlugin() {
                                 }
                             }
                         }
-                    });
+                    }, { signal });
 
                     // Add hover functionality for menu
                     if (modifiers.includes('hover')) {
@@ -540,14 +580,14 @@ function initializeDropdownPlugin() {
                         menu.addEventListener('mouseenter', () => {
                             clearTimeout(autoCloseTimeout);
                             clearTimeout(hoverTimeout);
-                        });
+                        }, { signal });
 
                         menu.addEventListener('mouseleave', () => {
                             // Always start timer when leaving menu bounds
                             if (startAutoCloseTimer) {
                                 startAutoCloseTimer();
                             }
-                        });
+                        }, { signal });
 
                         // Add event listeners to all interactive elements inside menu to cancel timers
                         const cancelCloseTimer = () => {
@@ -561,14 +601,14 @@ function initializeDropdownPlugin() {
                             menuItems.forEach(item => {
                                 if (wiredItems.has(item)) return;
                                 wiredItems.add(item);
-                                item.addEventListener('mouseenter', cancelCloseTimer);
+                                item.addEventListener('mouseenter', cancelCloseTimer, { signal });
                             });
                         };
 
                         // Setup listeners after a brief delay to ensure menu is rendered;
                         // again when a deferred menu renders its items
                         setTimeout(setupMenuItemListeners, 10);
-                        menu.addEventListener('manifest:defer-render', setupMenuItemListeners);
+                        menu.addEventListener('manifest:defer-render', setupMenuItemListeners, { signal });
                     }
                 } // End of setupDropdown function
             });

package/lib/manifest.integrity.json

@@ -1,9 +1,9 @@
 {
   "manifest.appwrite.auth.js": "sha384-9WNhIeSEzxxJm+yP7cV41kV2xyzyXgFCNpThqiREcNbb6tnIW6O7VRZPL2jwy9Nk",
-  "manifest.appwrite.data.js": "sha384-SE2I2UOfch9mzTeH8mN4eahFheT+k/nVTRLjHxFYqxPctgdw6x0c1Mq3Vm29JqZK",
-  "manifest.appwrite.presences.js": "sha384-qsRtzFCtW7pS+I95EQuZQoPAeZvBsNDSMFwDFBJriyCWcNv2Jo2KFvOweClJhowJ",
+  "manifest.appwrite.data.js": "sha384-lTISi6IIxO+bW130kKO7a9/EHyjGT0lUru8qtPElMs238L+/gxvHg/A3P9NefCST",
+  "manifest.appwrite.presences.js": "sha384-/CagPsgWhO1sWEevCNGJmZ/ezRK9YCjLjvF7hxNSM4gVlJmEVtfSLfF7wnsRq441",
   "manifest.bindings.js": "sha384-lPtMf8Ykaic9gNVZKq8Scia1881ZeMAyxer3WCIkUNwwrgzGBWto1OXADUwjvORF",
-  "manifest.charts.js": "sha384-G+huD7UvjF9zDovdVVlh4I5X1Mq4oNnJfoFg4NnGdP3R/4Skq9hy5cGuHNYLxDYm",
+  "manifest.charts.js": "sha384-H76xPNgPqvpOg1AIyvlZEqQo9V8AYASd/bWNRBMjY2hg+GbznTcH2LVXG2I89XAv",
   "manifest.chat.js": "sha384-88DfMfJLoi2oxclVD2iIMDkIGAExMXq5k47mekUredlicLaP3oZY5bwtwqs+TqDF",
   "manifest.code.js": "sha384-WGPlZE5Sp9GygUzJSmCdpLyYQTgvmEKc9BQS9Hmq1VTQwkqYJzPSWibHvPekcres",
   "manifest.color.js": "sha384-6Rv3LxyTcZNjrhtayQfqRdCx0uSZ4BiEbgEI98I62eTvp8Aw7LBIoNJ0Je1oktwL",
@@ -11,11 +11,11 @@
   "manifest.combobox.js": "sha384-MILTkrgsTzsYUjGo4ZuADqV85Xs4GmfB4xexfe9vbJMIoQTZ42W4zs+DTaVSPEsx",
   "manifest.components.js": "sha384-BUFA8h+G5Plr82sV7bKzO42pPoiRZwRQcKj1lt2ROFiKjjlkayU/vmkAFqEsdBA+",
   "manifest.computed.js": "sha384-GYML/e81gQfN+iDbqhPUgny8bINCyL+SrbTofoGk4hlCnLLjv51mCv42JMqq+ku5",
-  "manifest.data.js": "sha384-qUo88WvgBU6QXgCD63d5/LGA5AtJx/qRvi88RUoW+CsOLELxOPNHOV1PimyRBsD6",
+  "manifest.data.js": "sha384-gIOTxlWIUF3LnJiLNKMZ42qB6BwLozfRDAy4kdHgD7WiDvoSibuv9jgFRARCDTL2",
   "manifest.datepicker.js": "sha384-2XwFFnS4Bg5FDvG/v8x6KUvrjcBQEOYyTxynX2K/D/Qb3PI6+Y04lEwCnVDJLzwL",
   "manifest.defer.js": "sha384-GK9qJkYtchtyzSQ+3zmDQUJE3+au4qthT2M8JnFjXxgfwCH5IVKc2r3tackgMryU",
   "manifest.device.js": "sha384-YeQaS56L8IILqrQNBSeAOLwIh5DuAOrE60cYLK1+46qJtUrXlAvqGe2j5mbV4Vq7",
-  "manifest.dropdowns.js": "sha384-acufUps7R9WjqB4XXW5JLACqniuHJGM4CNTb2rF4B2Q/jv7ZRmsAwfr2McanOz3s",
+  "manifest.dropdowns.js": "sha384-ORVhBVvqhx58sd7Ij8b+NOIkjWF2TGcz5a8BC+CIswsS8TDLtyIDqD3YM4HDsGzB",
   "manifest.edit.js": "sha384-MOgQNdNLeHijhR0u2W6ntoOulKFglsATCFDqkinesOU15tHoILk/JNzHKkGi5dUG",
   "manifest.export.js": "sha384-Rx6XvqBZc4apzP/FwcDr6yIln4/zNa08Q4ZqBZcEqUz1aNZQfl4h0+Ae7mqCQyuG",
   "manifest.icons.js": "sha384-kKOINpX70YzNO3FvkV6umrmO3f0KIu0DNbwB+ej55a7y/lhU7v/myQtXL0bwCTbt",
@@ -28,7 +28,7 @@
   "manifest.slides.js": "sha384-3uRTkyK9XPLmnxI2+igZlpi4EyPlU/7IHj5j3BZJJ2KN455vXyk99fiXV3feO/XY",
   "manifest.status.js": "sha384-MBO345ab7H6Uq1X2dZLt4Ge1Gcra+Z2qYApvlAeIV8CJhDDJrz2FPXpp+Kcp8zcM",
   "manifest.svg.js": "sha384-qr/8H9+2cIhSXNbRWRtIdrDlTOxKlNJqwEefHvCYoiBNW/kKhPTFa109Orv/EBnb",
-  "manifest.sw.js": "sha384-KcWPCZS3JjopTS6bWZ+LarK4khKcWOL8q2ez+0OCj2XwjhcIN33IkLhdboAxoksP",
+  "manifest.sw.js": "sha384-yW9G0DKmr2DLNeT8w36vHnl/hRIuzlgMFGlWoDdykU8MNirE5+TyYUZuBzZ59F+/",
   "manifest.tabs.js": "sha384-otU09H7jnawVKQdLAYpMCd3jx00tgyPVr42D2hLIBzN5dG4se505YesavdnMqEi1",
   "manifest.tailwind.js": "sha384-r/Jvqb+Piz21jUts10BbVAJoKkShOdJRVFpywyi4HPIi/OfOJq5CtPyWAPbdkMgt",
   "manifest.toasts.js": "sha384-3zkWxzw693pxg3QDFsoYCA3CqYaLKmBaMArULXODD66Utolpewl0OAeTB92aWUVv",

package/lib/manifest.sw.js

@@ -16,7 +16,7 @@
 
 // Build stamps the published version here; unstamped (dev) falls back to the
 // registration URL's `v`, then 'dev'.
-const BUILD_VERSION = '0.5.257';
+const BUILD_VERSION = '0.5.259';
 const CACHE_PREFIX = 'mnfst-sw:';
 const META_CACHE = CACHE_PREFIX + 'meta';
 // Sized to hold a full precache.json warm-up (PRECACHE_MAX_ENTRIES server-side)

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "mnfst",
-    "version": "0.5.257",
+    "version": "0.5.259",
     "private": false,
     "workspaces": [
         "templates/starter",