@marvalt/digivalt-core 0.2.34 → 0.2.36

package/CHANGELOG.md

@@ -5,6 +5,21 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.2.36] - 2026-09-28
+
+### Added
+- `[icon name="shield"]` via `getIconShortcodeHandlers()`, merged by `createContentRegistry()`. Optional `tone`, `shape`, `size`, and `label`. The app self-hosts Material Symbols Outlined; core does not ship the font.
+- `@marvalt/digivalt-core/icons` exports the handler alone, so apps with a local registry can merge it without loading `react-helmet-async`.
+
+**Publish/deploy:** publish **`@marvalt/digivalt-core@0.2.36`**. Consumer apps install that version, add `@fontsource/material-symbols-outlined`, and merge `getIconShortcodeHandlers()` when they keep a local registry. Update **wp-custom-api-endpoints 1.6.20** for the dashboard hint.
+
+## [0.2.35] - 2026-09-23
+
+### Fixed
+- WordPress generation rejects a payload that does not contain the configured front page, restores the previous `wordpress-data.json`, and returns failure so the build exits. A two-page multi-frontend payload that includes the front page still passes. Fixture mode (`VITE_IS_LOVABLE`) skips the check.
+
+**Publish/deploy:** publish **`@marvalt/digivalt-core@0.2.35`**. Then bump consumer apps (including **digivalt-landing**, whose lockfile still pins 0.2.32) and redeploy. No WordPress plugin publish.
+
 ## [0.2.34] - 2026-09-22
 
 ### Added

package/GLOBAL-SHORTCODES.md

@@ -11,7 +11,39 @@ This document lists the shortcodes supported by `createContentRegistry()` from `
 
 **Do not register these as WordPress PHP shortcodes.** They must remain literal text in REST/HTML so `@marvalt/wparser` can replace them with React components. Content editors type them into WordPress; the headless app renders them.
 
-Merge order in `createContentRegistry`: adapter handlers (`@marvalt/madapter`, `@marvalt/plister`) plus core Gravity Forms and popup shortcodes. Apps can merge project-specific CPT handlers separately.
+Merge order in `createContentRegistry`: adapter handlers (`@marvalt/madapter`, `@marvalt/plister`) plus core icon, Gravity Forms, and popup shortcodes. Apps can merge project-specific CPT handlers separately.
+
+## Icons (core)
+
+Handler: `getIconShortcodeHandlers()`. `createContentRegistry()` merges it. Apps with their own registry import it from `@marvalt/digivalt-core/icons` (that entry does not load `react-helmet-async`).
+
+- `[icon name="shield"]` — Material Symbols ligature. `name` is required and must match `[a-z0-9_]+` (for example `shield`, `account_balance`). A missing or invalid name renders nothing.
+- Optional `tone`: `neutral` (default), `positive`, `negative`, `brand`.
+- Optional `shape`: `none` (default), `circle`, `rounded`, `square`.
+- Optional `size`: `sm`, `md` (default), `lg`.
+- Optional `label`: accessible name. Without it the icon is hidden from assistive tech.
+
+The app hosts the font. Do not load it from Google at runtime. In the app CSS:
+
+```css
+@import "@fontsource/material-symbols-outlined/400.css";
+
+.material-symbols-outlined {
+  font-family: "Material Symbols Outlined";
+  font-weight: normal;
+  font-style: normal;
+  line-height: 1;
+  letter-spacing: normal;
+  text-transform: none;
+  display: inline-block;
+  white-space: nowrap;
+  direction: ltr;
+  font-feature-settings: "liga";
+  -webkit-font-smoothing: antialiased;
+}
+```
+
+`@fontsource/material-symbols-outlined` already sets `font-display: swap`. Icon names are listed at [fonts.google.com/icons](https://fonts.google.com/icons). Do not register `[icon]` as a WordPress PHP shortcode.
 
 ## Gravity Forms (core)
 

package/dist/generators/wp-guard.d.ts

@@ -0,0 +1,11 @@
+export type WordPressPayloadCheck = {
+    ok: true;
+    warnEmptyChrome: boolean;
+} | {
+    ok: false;
+    expectedSlug?: string;
+    pageCount: number;
+    receivedSlugs: string[];
+};
+/** Reject a WordPress payload that cannot be the app's front page. */
+export declare function checkWordPressPayload(payload: unknown): WordPressPayloadCheck;