@pagefront/lint-commerce 0.10.0 → 0.11.0

package/README.md

@@ -143,23 +143,36 @@ that replaces format versions:
 - New exports: `detectSheetLine`, `RELEASE_MANIFEST`, `KNOWN_RELEASES`,
   `sheetSpecVersionFor`.
 
+Changed in 0.11.0 (catalogue 0.15.0, unchanged):
+
+- Layer 1 validates a sheet against the published schema its `$schema`
+  names. The package bundles every file in the repository's frozen schema
+  store (`commerce/schemas/`) at build time, with the release manifest;
+  nothing is embedded by hand.
+- A `$schema` naming no bundled schema fails Layer 1 with one error. In
+  0.10.0 the schema was chosen from the envelope field, so a release
+  sheet pointing at another version passed Layer 1 and fired `PDP-E-002`;
+  it now fails Layer 1 against the schema it names.
+- New exports: `CURRENT_RELEASE`, `schemaUrlFor`, `BUNDLED_SCHEMA_IDS`.
+
 ## API
 
 The public surface — everything importable from the package root, and
-nothing else (the bundled schema and the individual rule modules are
+nothing else (the bundled schemas and the individual rule modules are
 internal):
 
 - `validateAndLint(input: unknown, options?: LintOptions)` — the CLI's
-  own pipeline as a function: Layer 1 against the bundled schema for
-  the document's page type, then Layer 2 against that page type's
-  catalogue. Product sheets route to the product schema and catalogue,
-  Commerce Organization Sheets to the organization ones (see
-  `detectSheetType`). Returns
+  own pipeline as a function: Layer 1 against the published schema the
+  document's `$schema` names, then Layer 2 against its page type's
+  catalogue (see `detectSheetType`). Returns
   `{ layer: 1, schemaErrors: SchemaError[] }` or
-  `{ layer: 2, report: Report }`. Two lines are validated: a sheet
-  carrying `release` against the current sheet-spec schema for its type,
-  and a legacy sheet carrying `format_version` against the frozen legacy
-  schema (format 0.9). A sheet carrying both fields fails Layer 1.
+  `{ layer: 2, report: Report }`. The package bundles every published
+  schema, on both lines: the sheet-spec versions of each release and the
+  legacy format 0.9 schemas. A `$schema` naming a version the package
+  does not bundle fails Layer 1 with a single error at `/$schema`
+  (keyword `$schema`); the document is not validated against another
+  version. A document with no `$schema` is validated against the schema
+  its `release` or `format_version` leads to.
   Layer 1 runs validators compiled ahead of time at
   package build, so the pipeline needs no runtime code generation and
   runs under Cloudflare Workers and strict Content Security Policies.
@@ -167,7 +180,7 @@ internal):
   only, for input you have already schema-validated. Dispatches to the
   page type's catalogue the same way.
 - `validateOrganizationSheet(input: unknown)` — Layer 1 only, against
-  the bundled Commerce Organization Sheet schema. Returns
+  the Commerce Organization Sheet schema the document names. Returns
   `{ valid: true }` or `{ valid: false, schemaErrors: SchemaError[] }`.
 - `detectSheetType(sheet: Sheet): SheetType` — the page-type dispatch:
   `"organization"` when the envelope `$schema` path contains

package/dist/generated/release-manifest.d.ts

@@ -0,0 +1,22 @@
+export declare const RELEASE_MANIFEST: {
+    readonly $comment: "The commerce release manifest: each release and the member versions it bundles. Consumed by the linter; the human-readable form is releases.md.";
+    readonly vertical: "commerce";
+    readonly schema_url_template: "https://themachineweb.org/pagefront/spec/commerce/{sheet}/v{version}.json";
+    readonly releases: readonly [{
+        readonly release: "0.3.0";
+        readonly date: "2026-10-01";
+        readonly vocabulary: "0.3.0";
+        readonly sheets: {
+            readonly product: "0.9.0";
+            readonly organization: "0.3.0";
+        };
+    }];
+    readonly legacy: {
+        readonly envelope_field: "format_version";
+        readonly format_versions: readonly ["0.9"];
+        readonly schemas: {
+            readonly product: "https://themachineweb.org/pagefront/spec/commerce/product/v0.9.json";
+            readonly organization: "https://themachineweb.org/pagefront/spec/commerce/organization/v0.9.json";
+        };
+    };
+};

package/dist/generated/release-manifest.js

@@ -0,0 +1,27 @@
+// Generated by scripts/bundle-schemas.mjs; do not edit, do not commit.
+export const RELEASE_MANIFEST = {
+    "$comment": "The commerce release manifest: each release and the member versions it bundles. Consumed by the linter; the human-readable form is releases.md.",
+    "vertical": "commerce",
+    "schema_url_template": "https://themachineweb.org/pagefront/spec/commerce/{sheet}/v{version}.json",
+    "releases": [
+        {
+            "release": "0.3.0",
+            "date": "2026-10-01",
+            "vocabulary": "0.3.0",
+            "sheets": {
+                "product": "0.9.0",
+                "organization": "0.3.0"
+            }
+        }
+    ],
+    "legacy": {
+        "envelope_field": "format_version",
+        "format_versions": [
+            "0.9"
+        ],
+        "schemas": {
+            "product": "https://themachineweb.org/pagefront/spec/commerce/product/v0.9.json",
+            "organization": "https://themachineweb.org/pagefront/spec/commerce/organization/v0.9.json"
+        }
+    }
+};

package/dist/generated/schema-ids.d.ts

@@ -0,0 +1 @@
+export declare const SCHEMA_IDS: readonly string[];

package/dist/generated/schema-ids.js

@@ -0,0 +1,7 @@
+// Generated by scripts/bundle-schemas.mjs; do not edit, do not commit.
+export const SCHEMA_IDS = [
+    "https://themachineweb.org/pagefront/spec/commerce/organization/v0.3.0.json",
+    "https://themachineweb.org/pagefront/spec/commerce/organization/v0.9.json",
+    "https://themachineweb.org/pagefront/spec/commerce/product/v0.9.0.json",
+    "https://themachineweb.org/pagefront/spec/commerce/product/v0.9.json"
+];

package/dist/generated/schema-properties.d.ts

@@ -0,0 +1 @@
+export declare const DATA_BLOCK_PROPERTIES: readonly string[];

package/dist/{schema-properties.js → generated/schema-properties.js}

@@ -1,12 +1,4 @@
-/**
- * The data-block property inventory for PDP-I-001, derived from the
- * Pagefront JSON Schema (commerce/spec/product.json, format 0.9) —
- * the normative property inventory per the catalogue's Definitions
- * section. Generated from `$defs.dataBlock.properties`; the
- * inventory drift test (test/inventory.test.mjs) fails when the
- * schema and this list diverge. Regenerate on schema change, in the
- * same catalogue-versioned change.
- */
+// Generated by scripts/bundle-schemas.mjs; do not edit, do not commit.
 export const DATA_BLOCK_PROPERTIES = [
     "@context",
     "@id",
@@ -64,5 +56,5 @@ export const DATA_BLOCK_PROPERTIES = [
     "variesBy",
     "video",
     "weight",
-    "width",
+    "width"
 ];

package/dist/generated/schemas.d.ts

@@ -0,0 +1 @@
+export declare const SCHEMAS: Readonly<Record<string, Record<string, unknown>>>;