@marvalt/digivalt-core 0.2.36 → 0.2.37

package/CHANGELOG.md

@@ -5,6 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.2.37] - 2026-09-29
+
+### Changed
+- `digivalt-init` env templates drop unused `VITE_USE_DSTYLER` and Supabase keys, and include PHPList plus tracker variables. `.env.example` and `.env.local.example` match `bin/env-example-fragments.cjs`.
+- Installing the package prints a reminder to run `npx digivalt-init` in the app root.
+
+**Publish/deploy:** publish **`@marvalt/digivalt-core@0.2.37`**. Apps rerun `npx digivalt-init` to refresh the managed env block. No WordPress plugin publish.
+
 ## [0.2.36] - 2026-09-28
 
 ### Added

package/bin/env-example-fragments.cjs

@@ -5,7 +5,7 @@
 
 const ENV_EXAMPLE_MANAGED_BODY = `# WordPress / static generation (public URLs)
 VITE_WORDPRESS_API_URL=https://cms.example.com/wp-json
-# direct | cloudflare_proxy | supabase_proxy
+# direct | cloudflare_proxy
 VITE_AUTH_MODE=direct
 VITE_CLOUDFLARE_WORKER_URL=
 VITE_LOCAL_DEVELOPMENT=false
@@ -20,7 +20,6 @@ VITE_FRONTEND_NAME=My App
 # Comma-separated WordPress CPT slugs plus optional pseudo-types (e.g. google_reviews for vibune-google-reviews static fetch).
 VITE_ENABLED_POST_TYPES=posts,pages
 VITE_DEFAULT_MAX_ITEMS=200
-VITE_USE_DSTYLER=true
 # Optional theme name (default digivalt_core; see loadTheme in config/themes)
 # VITE_THEME=
 
@@ -30,16 +29,25 @@ VITE_USE_DSTYLER=true
 # Integration URLs only (secrets belong in .env.local)
 VITE_MAUTIC_URL=
 VITE_MAUTIC_PROXY_URL=
+VITE_PHPLIST_URL=
+VITE_PHPLIST_LIST_ID=
+VITE_PHPLIST_SUBSCRIBE_PAGE_IDS=
+VITE_PHPLIST_PROXY_URL=
+VITE_PHPLIST_NEWSLETTER_ROUTE_BASE=/newsletters
 VITE_SUITECRM_URL=
 VITE_SUITECRM_PROXY_URL=
 # Optional; OAuth token endpoint if not the default for your SuiteCRM
 # VITE_SUITECRM_TOKEN_URL=
-VITE_SUPABASE_URL=
-VITE_SUPABASE_ANON_KEY=
 
 VITE_CHATWOOT_BASE_URL=
 VITE_CHATWOOT_WEBSITE_TOKEN=
 
+# Analytics (@digivalt/tracker). Paste the full snippet; leave empty to disable.
+# VITE_TRACKING_IN_DEV=true injects tracking during local dev.
+VITE_GA_TRACKING_CODE=
+VITE_MATOMO_TRACKING_CODE=
+VITE_TRACKING_IN_DEV=
+
 # Cloudflare account (wrangler / deploy-secrets; not a Vite embed unless duplicated as VITE_)
 CLOUDFLARE_ACCOUNT_ID=
 
@@ -57,10 +65,8 @@ VITE_SEO_GOOGLE_SITE_VERIFICATION=
 VITE_SEO_BING_SITE_VERIFICATION=
 # Opt-in frontend path prefixes for non-page post types: rest_base:/route-prefix
 # VITE_SEO_ROUTE_PREFIXES=eventbrite_event:/events,member:/members/profile
-# Optional: WP page slug that must map to `/` when Reading Settings front_page does not match the app homepage
+# Optional: WP page slug that must map to / when Reading Settings front_page does not match the app homepage
 # VITE_SEO_FRONT_PAGE_SLUG=
-# PHPList public archive base (must match the app router)
-# VITE_PHPLIST_NEWSLETTER_ROUTE_BASE=/newsletters
 
 # Performance toggles (optional; omit to use defaults in getPerformanceConfig)
 # VITE_PERF_LAZY_LOADING=true
@@ -94,12 +100,13 @@ VITE_SUITECRM_CLIENT_SECRET=
 VITE_SUITECRM_USERNAME=
 VITE_SUITECRM_PASSWORD=
 
-# Supabase service role (only if needed; never expose in client bundles inappropriately)
-# VITE_SUPABASE_SERVICE_ROLE_KEY=
-
 # PHPList REST API (build generator + Pages Function proxy — prefer without VITE_ prefix)
 PHPLIST_API_USER=
 PHPLIST_API_PASSWORD=
+# Example: https://lists.example.tld/admin/?page=call&pi=restapi
+PHPLIST_API_ENDPOINT=
+PHPLIST_API_SECRET=
+PHPLIST_PUBLIC_BASE_URL=
 # Optional Node aliases (same values; uploaded by deploy-secrets if set)
 # PHPLIST_URL=
 # PHPLIST_LIST_ID=

package/bin/postinstall-hint.cjs

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+
+console.log('\nDigiValt: in the app root, run npx digivalt-init\n');

package/docs/ENVIRONMENT.md

@@ -50,7 +50,7 @@ Align **`name`** in `wrangler.toml` with your **Cloudflare Pages** project. Loca
 | Area | Notes |
 |------|--------|
 | **Path mounts (digivalt-uworker)** | Consumer apps only: set Vite `base` (e.g. `/landing-page/`) and React Router `basename` to match the Worker `BASE_PATH`. Form/API helpers in this package use `withBasePath()` so `/api/*` follows `import.meta.env.BASE_URL`. See [PATH-MOUNT.md](./PATH-MOUNT.md). `digivalt-landing` stays root-hosted. |
-| **WordPress / static gen** | `VITE_WORDPRESS_API_URL`, `VITE_AUTH_MODE`, `VITE_CLOUDFLARE_WORKER_URL`, `VITE_LOCAL_DEVELOPMENT`, `VITE_ENABLED_POST_TYPES`, `VITE_DEFAULT_MAX_ITEMS`, `VITE_USE_DSTYLER`, `VITE_FRONTEND_ID` / `VITE_FRONTEND_NAME` — used by hooks, generators, and `getIntegrationConfig` / `getAppEnvironmentConfig`. **`VITE_FRONTEND_ID`** also selects DigiValt menu locations `{id}-header` / `{id}-footer` (fallback `default-*`). **`google_reviews`** in `VITE_ENABLED_POST_TYPES` is a pseudo-type (not a WordPress CPT): it opt-in enables build-time fetch of `public/google-reviews-data.json` via the `vibune-google-reviews` plugin. |
+| **WordPress / static gen** | `VITE_WORDPRESS_API_URL`, `VITE_AUTH_MODE`, `VITE_CLOUDFLARE_WORKER_URL`, `VITE_LOCAL_DEVELOPMENT`, `VITE_ENABLED_POST_TYPES`, `VITE_DEFAULT_MAX_ITEMS`, `VITE_FRONTEND_ID` / `VITE_FRONTEND_NAME` — used by hooks, generators, and `getIntegrationConfig` / `getAppEnvironmentConfig`. **`VITE_FRONTEND_ID`** also selects DigiValt menu locations `{id}-header` / `{id}-footer` (fallback `default-*`). **`google_reviews`** in `VITE_ENABLED_POST_TYPES` is a pseudo-type (not a WordPress CPT): it opt-in enables build-time fetch of `public/google-reviews-data.json` via the `vibune-google-reviews` plugin. |
 | **Theme** | `VITE_THEME` — optional; see `loadTheme` in `config/themes`. |
 | **Integrations (URLs often public; secrets in `.env.local`)** | Mautic, SuiteCRM, Supabase, Chatwoot, Gravity Forms — see `getIntegrationConfig` in `src/config/integrations.ts`. `VITE_SUITECRM_TOKEN_URL` is optional for non-default OAuth token endpoints (`environment.ts`). |
 | **SEO** | `VITE_SEO_*` site identity; `VITE_SEO_ROUTE_PREFIXES` for CPT paths — see [SEO-PERFORMANCE.md](./SEO-PERFORMANCE.md). Per-URL fields: WordPress **digivalt-seo**. |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@marvalt/digivalt-core",
-  "version": "0.2.36",
+  "version": "0.2.37",
   "description": "Core glue logic and shared context for DigiVAlt frontend applications",
   "license": "GPL-3.0-or-later",
   "main": "dist/index.cjs",
@@ -90,7 +90,8 @@
     "smoke:google-reviews-gate": "node ./scripts/test-google-reviews-gate.cjs",
     "smoke:wp-payload-guard": "node ./scripts/test-wp-payload-guard.cjs",
     "smoke": "npm run smoke:imports && npm run smoke:init && npm run smoke:sitemap && npm run smoke:google-reviews-gate && npm run smoke:wp-payload-guard",
-    "prepublishOnly": "npm run clean && npm run build && npm run smoke && node ../scripts/verify-pack.cjs"
+    "prepublishOnly": "npm run clean && npm run build && npm run smoke && node ../scripts/verify-pack.cjs",
+    "postinstall": "node ./bin/postinstall-hint.cjs"
   },
   "devDependencies": {
     "@rollup/plugin-commonjs": "^25.0.7",