@marvalt/digivalt-core 0.2.22 → 0.2.24

package/docs/ENVIRONMENT.md

@@ -36,7 +36,7 @@ Or install once with `npm install --legacy-peer-deps`. Runtime behavior with Rea
 
 After `digivalt-init`, the app has [`scripts/deploy-secrets.js`](../template/scripts/deploy-secrets.js) (from the template). It reads **`.env`** and **`.env.local`**, then uploads only keys that pass an **allowlist** to Cloudflare Pages via Wrangler `pages secret bulk`.
 
-- **Allowlist (summary):** all **`VITE_*`** keys except **`VITE_IS_LOVABLE`**, **`VITE_LOCAL_DEVELOPMENT`**, **`VITE_AUTH_MODE`**, **`VITE_DEFAULT_MAX_ITEMS`**; plus **`CLOUDFLARE_*`**, **`CF_ACCESS_*`**, **`TURNSTILE_*`**, **`ALLOWED_ORIGINS`**, **`SITE_URL`**, and Node alias prefixes **`WORDPRESS_`**, **`WP_`**, **`GF_`**, **`GRAVITY_FORMS_`**, **`MAUTIC_`**, **`SUITECRM_`**, **`GOOGLE_REVIEWS_`**. **`NPM_TOKEN`** is never uploaded. Run **`node scripts/deploy-secrets.js --dry-run`** to list keys before upload.
+- **Allowlist (summary):** all **`VITE_*`** keys except **`VITE_IS_LOVABLE`**, **`VITE_LOCAL_DEVELOPMENT`**, **`VITE_AUTH_MODE`**, **`VITE_DEFAULT_MAX_ITEMS`**; plus **`CLOUDFLARE_*`**, **`CF_ACCESS_*`**, **`TURNSTILE_*`**, **`PHPLIST_*`**, **`ALLOWED_ORIGINS`**, **`SITE_URL`**, and Node alias prefixes **`WORDPRESS_`**, **`WP_`**, **`GF_`**, **`GRAVITY_FORMS_`**, **`MAUTIC_`**, **`SUITECRM_`**, **`GOOGLE_REVIEWS_`**. **`NPM_TOKEN`** is never uploaded. Run **`node scripts/deploy-secrets.js --dry-run`** to list keys before upload.
 - **Excluded from bulk upload (set in the Pages UI or locally instead):** `NODE_ENV`, `VITE_IS_LOVABLE`, `VITE_LOCAL_DEVELOPMENT`, `VITE_AUTH_MODE`, `VITE_DEFAULT_MAX_ITEMS` — so environment-specific or non-secret toggles are not mass-synced.
 - **Empty values** are skipped. **`CLOUDFLARE_ACCOUNT_ID`** in env is used when invoking Wrangler; the **project name** comes from **`wrangler.toml`** in the app root.
 - **Turnstile:** `VITE_TURNSTILE_SITE_KEY` is for the browser; **`TURNSTILE_SECRET_KEY`** is server-only for Pages Functions (not a `VITE_` var). Both can appear in the allowlist path when set in your env files.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@marvalt/digivalt-core",
-  "version": "0.2.22",
+  "version": "0.2.24",
   "description": "Core glue logic and shared context for DigiVAlt frontend applications",
   "license": "GPL-3.0-or-later",
   "main": "dist/index.cjs",
@@ -107,7 +107,7 @@
     "@digivalt/tracker": "^0.1.0",
     "@marvalt/dstyler": "^0.1.51",
     "@marvalt/madapter": "^2.3.7",
-    "@marvalt/plister": "^0.1.0",
+    "@marvalt/plister": "^0.2.0",
     "@marvalt/sadapter": "^0.1.5",
     "@marvalt/shcoder": "^0.1.35",
     "@marvalt/tadapter": "^1.0.12",

package/template/scripts/deploy-pages.js

@@ -0,0 +1,88 @@
+import fs from 'fs';
+import path from 'path';
+import { execSync } from 'child_process';
+
+/**
+ * Build and deploy to Cloudflare Pages via Wrangler.
+ *
+ *   node scripts/deploy-pages.js              # build + deploy production branch
+ *   node scripts/deploy-pages.js --branch staging
+ *   node scripts/deploy-pages.js --skip-build # deploy existing dist/
+ *   node scripts/deploy-pages.js --dry-run
+ *
+ * Requires: npx wrangler login, CLOUDFLARE_ACCOUNT_ID in .env / .env.local,
+ * and wrangler.toml `name` matching your Pages project.
+ */
+
+const dryRun = process.argv.includes('--dry-run');
+const skipBuild = process.argv.includes('--skip-build');
+const branchArg = process.argv.find((arg) => arg.startsWith('--branch='));
+const branch = branchArg ? branchArg.slice('--branch='.length) : process.env.DEPLOY_BRANCH || '';
+
+const parseAccountId = () => {
+  for (const fileName of ['.env', '.env.local']) {
+    const filePath = path.resolve(process.cwd(), fileName);
+    if (!fs.existsSync(filePath)) continue;
+    const match = fs.readFileSync(filePath, 'utf8').match(/^CLOUDFLARE_ACCOUNT_ID=(.*)$/m);
+    if (match) {
+      let value = match[1].trim();
+      if ((value.startsWith('"') && value.endsWith('"')) || (value.startsWith("'") && value.endsWith("'"))) {
+        value = value.slice(1, -1);
+      }
+      if (value) return value;
+    }
+  }
+  return process.env.CLOUDFLARE_ACCOUNT_ID || '';
+};
+
+const readProjectName = () => {
+  const tomlPath = path.resolve(process.cwd(), 'wrangler.toml');
+  if (!fs.existsSync(tomlPath)) {
+    throw new Error('wrangler.toml not found in project root.');
+  }
+  const nameMatch = fs.readFileSync(tomlPath, 'utf8').match(/^name\s*=\s*["']([^"']+)["']/m);
+  if (!nameMatch) {
+    throw new Error('Could not read project name from wrangler.toml.');
+  }
+  return nameMatch[1];
+};
+
+const projectName = readProjectName();
+const accountId = parseAccountId();
+const distPath = path.resolve(process.cwd(), 'dist');
+
+console.log(`📦 Cloudflare Pages project: ${projectName}`);
+if (branch) console.log(`🌿 Deploy branch: ${branch}`);
+if (accountId) console.log(`🏢 Cloudflare account: ${accountId}`);
+
+if (!skipBuild) {
+  console.log('🔨 Running npm run build...');
+  if (dryRun) {
+    console.log('   (dry run — build skipped)');
+  } else {
+    execSync('npm run build', { stdio: 'inherit' });
+  }
+} else {
+  console.log('⏭️  Skipping build (--skip-build)');
+}
+
+if (!dryRun && !fs.existsSync(distPath)) {
+  throw new Error('dist/ not found. Run npm run build first or remove --skip-build.');
+}
+
+let cmd = 'npx wrangler pages deploy dist';
+cmd += ` --project-name ${projectName}`;
+if (branch) cmd += ` --branch ${branch}`;
+cmd += ' --commit-dirty=true';
+
+console.log(dryRun ? `✅ Dry run — would run: ${cmd}` : `🚀 ${cmd}`);
+
+if (dryRun) {
+  process.exit(0);
+}
+
+const env = { ...process.env };
+if (accountId) env.CLOUDFLARE_ACCOUNT_ID = accountId;
+
+execSync(cmd, { stdio: 'inherit', env });
+console.log('✅ Pages deployment complete.');

package/template/scripts/deploy-secrets.js

@@ -41,6 +41,7 @@ const allowedPatterns = [
   /^MAUTIC_/,
   /^SUITECRM_/,
   /^GOOGLE_REVIEWS_/,
+  /^PHPLIST_/,
   /^VITE_/,
 ];