@pagefront/lint-commerce 0.10.0 → 0.12.0

package/README.md

@@ -26,11 +26,11 @@ lint with their own catalogue, dispatched by sheet type.
 
 ## Catalogue
 
-Catalogue 0.15.0, supporting commerce release 0.3.0 (Product Sheet spec
-0.9.0, Organization Sheet spec 0.3.0) and the legacy draft line (format
-0.9): 56 product rules (`PDP-E-001` to `PDP-E-016`, `PDP-W-001` to
-`PDP-W-039`, `PDP-I-001`) and 9 organization rules (`ORG-E-001` to
-`ORG-E-003`, `ORG-W-001` to `ORG-W-006`), each defined in
+Catalogue 0.16.0, supporting commerce releases 0.4.0 (Product Sheet spec
+0.10.0, Organization Sheet spec 0.4.0) and 0.3.0, and the legacy draft line
+(format 0.9): 58 product rules (`PDP-E-001` to `PDP-E-018`, `PDP-W-001` to
+`PDP-W-039`, `PDP-I-001`) and 10 organization rules (`ORG-E-001` to
+`ORG-E-004`, `ORG-W-001` to `ORG-W-006`), each defined in
 [`rules.md`](https://github.com/themachineweb/pagefront/blob/main/commerce/spec/rules.md)
 with its target, check, message and remediation. Every report carries the
 `catalogue_version` it was produced with.
@@ -143,23 +143,56 @@ that replaces format versions:
 - New exports: `detectSheetLine`, `RELEASE_MANIFEST`, `KNOWN_RELEASES`,
   `sheetSpecVersionFor`.
 
+Changed in 0.11.0 (catalogue 0.15.0, unchanged):
+
+- Layer 1 validates a sheet against the published schema its `$schema`
+  names. The package bundles every file in the repository's frozen schema
+  store (`commerce/schemas/`) at build time, with the release manifest;
+  nothing is embedded by hand.
+- A `$schema` naming no bundled schema fails Layer 1 with one error. In
+  0.10.0 the schema was chosen from the envelope field, so a release
+  sheet pointing at another version passed Layer 1 and fired `PDP-E-002`;
+  it now fails Layer 1 against the schema it names.
+- New exports: `CURRENT_RELEASE`, `schemaUrlFor`, `BUNDLED_SCHEMA_IDS`.
+
+Added in 0.12.0 (catalogue 0.16.0), with commerce release 0.4.0. Requires
+`@pagefront/lint-core` 0.3.0.
+
+- **A sheet is judged by the release it declares.** Layer 1 validates it
+  against the schema its `release` bundles for its type (release 0.4.0:
+  `product/v0.10.0.json`, `organization/v0.4.0.json`, which require
+  `$schema`; release 0.3.0: the 0.3.0 schemas). Legacy sheets keep
+  resolving through `$schema`.
+- **Rules are gated by release.** Every rule has an `appliesFrom` release
+  and the engine skips it on a sheet declaring a lower one. All earlier
+  rules apply from 0.3.0 and to legacy sheets.
+- `PDP-E-002` and `ORG-E-003` compare a present `$schema` with the URL of
+  the schema the release bundles, and are quiet when `$schema` is absent.
+- `PDP-E-017` (applies from release 0.4.0) — an exclusion, or an
+  adjustment's `when`, names a dimension the configurator does not declare
+  or an option the dimension does not list. Values are compared strictly:
+  `1` is not `"1"`.
+- `PDP-E-018` and `ORG-E-004` — the sheet declares a `release` the release
+  manifest does not list. At Layer 1 this is a single error at `/release`.
+
 ## API
 
 The public surface — everything importable from the package root, and
-nothing else (the bundled schema and the individual rule modules are
+nothing else (the bundled schemas and the individual rule modules are
 internal):
 
 - `validateAndLint(input: unknown, options?: LintOptions)` — the CLI's
-  own pipeline as a function: Layer 1 against the bundled schema for
-  the document's page type, then Layer 2 against that page type's
-  catalogue. Product sheets route to the product schema and catalogue,
-  Commerce Organization Sheets to the organization ones (see
-  `detectSheetType`). Returns
+  own pipeline as a function: Layer 1 against the published schema the
+  document's declared release bundles for its page type, then Layer 2
+  against that page type's catalogue (see `detectSheetType`), with the
+  rules that apply from that release. Returns
   `{ layer: 1, schemaErrors: SchemaError[] }` or
-  `{ layer: 2, report: Report }`. Two lines are validated: a sheet
-  carrying `release` against the current sheet-spec schema for its type,
-  and a legacy sheet carrying `format_version` against the frozen legacy
-  schema (format 0.9). A sheet carrying both fields fails Layer 1.
+  `{ layer: 2, report: Report }`. The package bundles every published
+  schema, on both lines. A `release` the manifest does not list fails
+  Layer 1 with a single error at `/release` (keyword `release`). A
+  `$schema` that disagrees with the release is a Layer 2 finding. Legacy
+  sheets (`format_version`) are validated against the schema their
+  `$schema` names, or the legacy schema when it is absent.
   Layer 1 runs validators compiled ahead of time at
   package build, so the pipeline needs no runtime code generation and
   runs under Cloudflare Workers and strict Content Security Policies.
@@ -167,7 +200,7 @@ internal):
   only, for input you have already schema-validated. Dispatches to the
   page type's catalogue the same way.
 - `validateOrganizationSheet(input: unknown)` — Layer 1 only, against
-  the bundled Commerce Organization Sheet schema. Returns
+  the Commerce Organization Sheet schema the document names. Returns
   `{ valid: true }` or `{ valid: false, schemaErrors: SchemaError[] }`.
 - `detectSheetType(sheet: Sheet): SheetType` — the page-type dispatch:
   `"organization"` when the envelope `$schema` path contains

package/dist/catalogue.js

@@ -15,6 +15,8 @@ import { pdpE013 } from "./rules/pdp-e-013.js";
 import { pdpE014 } from "./rules/pdp-e-014.js";
 import { pdpE015 } from "./rules/pdp-e-015.js";
 import { pdpE016 } from "./rules/pdp-e-016.js";
+import { pdpE017 } from "./rules/pdp-e-017.js";
+import { pdpE018 } from "./rules/pdp-e-018.js";
 import { pdpW001 } from "./rules/pdp-w-001.js";
 import { pdpW002 } from "./rules/pdp-w-002.js";
 import { pdpW003 } from "./rules/pdp-w-003.js";
@@ -65,6 +67,6 @@ import { pdpI001 } from "./rules/pdp-i-001.js";
 export const commerceCatalogue = {
     vertical: "commerce",
     releases: KNOWN_RELEASES,
-    catalogueVersion: "0.15.0",
-    rules: [pdpE001, pdpE002, pdpE003, pdpE004, pdpE005, pdpE006, pdpE007, pdpE008, pdpE009, pdpE010, pdpE011, pdpE012, pdpE013, pdpE014, pdpE015, pdpE016, pdpW001, pdpW002, pdpW003, pdpW004, pdpW005, pdpW006, pdpW007, pdpW008, pdpW009, pdpW010, pdpW011, pdpW012, pdpW013, pdpW014, pdpW015, pdpW016, pdpW017, pdpW018, pdpW019, pdpW020, pdpW021, pdpW022, pdpW023, pdpW024, pdpW025, pdpW026, pdpW027, pdpW028, pdpW029, pdpW030, pdpW031, pdpW032, pdpW033, pdpW034, pdpW035, pdpW036, pdpW037, pdpW038, pdpW039, pdpI001],
+    catalogueVersion: "0.16.0",
+    rules: [pdpE001, pdpE002, pdpE003, pdpE004, pdpE005, pdpE006, pdpE007, pdpE008, pdpE009, pdpE010, pdpE011, pdpE012, pdpE013, pdpE014, pdpE015, pdpE016, pdpE017, pdpE018, pdpW001, pdpW002, pdpW003, pdpW004, pdpW005, pdpW006, pdpW007, pdpW008, pdpW009, pdpW010, pdpW011, pdpW012, pdpW013, pdpW014, pdpW015, pdpW016, pdpW017, pdpW018, pdpW019, pdpW020, pdpW021, pdpW022, pdpW023, pdpW024, pdpW025, pdpW026, pdpW027, pdpW028, pdpW029, pdpW030, pdpW031, pdpW032, pdpW033, pdpW034, pdpW035, pdpW036, pdpW037, pdpW038, pdpW039, pdpI001],
 };

package/dist/generated/release-manifest.d.ts

@@ -0,0 +1,30 @@
+export declare const RELEASE_MANIFEST: {
+    readonly $comment: "The commerce release manifest: each release and the member versions it bundles. Consumed by the linter; the human-readable form is releases.md.";
+    readonly vertical: "commerce";
+    readonly schema_url_template: "https://themachineweb.org/pagefront/spec/commerce/{sheet}/v{version}.json";
+    readonly releases: readonly [{
+        readonly release: "0.3.0";
+        readonly date: "2026-10-01";
+        readonly vocabulary: "0.3.0";
+        readonly sheets: {
+            readonly product: "0.9.0";
+            readonly organization: "0.3.0";
+        };
+    }, {
+        readonly release: "0.4.0";
+        readonly date: "2026-10-02";
+        readonly vocabulary: "0.4.0";
+        readonly sheets: {
+            readonly product: "0.10.0";
+            readonly organization: "0.4.0";
+        };
+    }];
+    readonly legacy: {
+        readonly envelope_field: "format_version";
+        readonly format_versions: readonly ["0.9"];
+        readonly schemas: {
+            readonly product: "https://themachineweb.org/pagefront/spec/commerce/product/v0.9.json";
+            readonly organization: "https://themachineweb.org/pagefront/spec/commerce/organization/v0.9.json";
+        };
+    };
+};

package/dist/generated/release-manifest.js

@@ -0,0 +1,36 @@
+// Generated by scripts/bundle-schemas.mjs; do not edit, do not commit.
+export const RELEASE_MANIFEST = {
+    "$comment": "The commerce release manifest: each release and the member versions it bundles. Consumed by the linter; the human-readable form is releases.md.",
+    "vertical": "commerce",
+    "schema_url_template": "https://themachineweb.org/pagefront/spec/commerce/{sheet}/v{version}.json",
+    "releases": [
+        {
+            "release": "0.3.0",
+            "date": "2026-10-01",
+            "vocabulary": "0.3.0",
+            "sheets": {
+                "product": "0.9.0",
+                "organization": "0.3.0"
+            }
+        },
+        {
+            "release": "0.4.0",
+            "date": "2026-10-02",
+            "vocabulary": "0.4.0",
+            "sheets": {
+                "product": "0.10.0",
+                "organization": "0.4.0"
+            }
+        }
+    ],
+    "legacy": {
+        "envelope_field": "format_version",
+        "format_versions": [
+            "0.9"
+        ],
+        "schemas": {
+            "product": "https://themachineweb.org/pagefront/spec/commerce/product/v0.9.json",
+            "organization": "https://themachineweb.org/pagefront/spec/commerce/organization/v0.9.json"
+        }
+    }
+};

package/dist/generated/schema-ids.d.ts

@@ -0,0 +1 @@
+export declare const SCHEMA_IDS: readonly string[];

package/dist/generated/schema-ids.js

@@ -0,0 +1,9 @@
+// Generated by scripts/bundle-schemas.mjs; do not edit, do not commit.
+export const SCHEMA_IDS = [
+    "https://themachineweb.org/pagefront/spec/commerce/organization/v0.3.0.json",
+    "https://themachineweb.org/pagefront/spec/commerce/organization/v0.4.0.json",
+    "https://themachineweb.org/pagefront/spec/commerce/organization/v0.9.json",
+    "https://themachineweb.org/pagefront/spec/commerce/product/v0.10.0.json",
+    "https://themachineweb.org/pagefront/spec/commerce/product/v0.9.0.json",
+    "https://themachineweb.org/pagefront/spec/commerce/product/v0.9.json"
+];

package/dist/generated/schema-properties.d.ts

@@ -0,0 +1 @@
+export declare const DATA_BLOCK_PROPERTIES: readonly string[];

package/dist/{schema-properties.js → generated/schema-properties.js}

@@ -1,12 +1,4 @@
-/**
- * The data-block property inventory for PDP-I-001, derived from the
- * Pagefront JSON Schema (commerce/spec/product.json, format 0.9) —
- * the normative property inventory per the catalogue's Definitions
- * section. Generated from `$defs.dataBlock.properties`; the
- * inventory drift test (test/inventory.test.mjs) fails when the
- * schema and this list diverge. Regenerate on schema change, in the
- * same catalogue-versioned change.
- */
+// Generated by scripts/bundle-schemas.mjs; do not edit, do not commit.
 export const DATA_BLOCK_PROPERTIES = [
     "@context",
     "@id",
@@ -64,5 +56,5 @@ export const DATA_BLOCK_PROPERTIES = [
     "variesBy",
     "video",
     "weight",
-    "width",
+    "width"
 ];

package/dist/generated/schemas.d.ts

@@ -0,0 +1 @@
+export declare const SCHEMAS: Readonly<Record<string, Record<string, unknown>>>;