@pagefront/lint-commerce 0.11.0 → 0.12.1

package/README.md

@@ -26,11 +26,11 @@ lint with their own catalogue, dispatched by sheet type.
 
 ## Catalogue
 
-Catalogue 0.15.0, supporting commerce release 0.3.0 (Product Sheet spec
-0.9.0, Organization Sheet spec 0.3.0) and the legacy draft line (format
-0.9): 56 product rules (`PDP-E-001` to `PDP-E-016`, `PDP-W-001` to
-`PDP-W-039`, `PDP-I-001`) and 9 organization rules (`ORG-E-001` to
-`ORG-E-003`, `ORG-W-001` to `ORG-W-006`), each defined in
+Catalogue 0.16.1, supporting commerce releases 0.4.0 (Product Sheet spec
+0.10.0, Organization Sheet spec 0.4.0) and 0.3.0, and the legacy draft line
+(format 0.9): 58 product rules (`PDP-E-001` to `PDP-E-018`, `PDP-W-001` to
+`PDP-W-039`, `PDP-I-001`) and 10 organization rules (`ORG-E-001` to
+`ORG-E-004`, `ORG-W-001` to `ORG-W-006`), each defined in
 [`rules.md`](https://github.com/themachineweb/pagefront/blob/main/commerce/spec/rules.md)
 with its target, check, message and remediation. Every report carries the
 `catalogue_version` it was produced with.
@@ -155,6 +155,34 @@ Changed in 0.11.0 (catalogue 0.15.0, unchanged):
   it now fails Layer 1 against the schema it names.
 - New exports: `CURRENT_RELEASE`, `schemaUrlFor`, `BUNDLED_SCHEMA_IDS`.
 
+Added in 0.12.0 (catalogue 0.16.0), with commerce release 0.4.0. Requires
+`@pagefront/lint-core` 0.3.0.
+
+- **A sheet is judged by the release it declares.** Layer 1 validates it
+  against the schema its `release` bundles for its type (release 0.4.0:
+  `product/v0.10.0.json`, `organization/v0.4.0.json`, which require
+  `$schema`; release 0.3.0: the 0.3.0 schemas). Legacy sheets keep
+  resolving through `$schema`.
+- **Rules are gated by release.** Every rule has an `appliesFrom` release
+  and the engine skips it on a sheet declaring a lower one. All earlier
+  rules apply from 0.3.0 and to legacy sheets.
+- `PDP-E-002` and `ORG-E-003` compare a present `$schema` with the URL of
+  the schema the release bundles, and are quiet when `$schema` is absent.
+- `PDP-E-017` (applies from release 0.4.0) — an exclusion, or an
+  adjustment's `when`, names a dimension the configurator does not declare
+  or an option the dimension does not list. Values are compared strictly:
+  `1` is not `"1"`.
+- `PDP-E-018` and `ORG-E-004` — the sheet declares a `release` the release
+  manifest does not list. At Layer 1 this is a single error at `/release`.
+
+Changed in 0.12.1 (catalogue 0.16.1):
+
+- `PDP-E-017` adds a type hint. When a reference matches no option but a
+  declared option has the same text under another JSON type, the message
+  names both types, and the finding's `values` carry `reference_type`,
+  `declared_option` and `declared_type`. Comparison is unchanged and the
+  finding stays an error.
+
 ## API
 
 The public surface — everything importable from the package root, and
@@ -163,16 +191,16 @@ internal):
 
 - `validateAndLint(input: unknown, options?: LintOptions)` — the CLI's
   own pipeline as a function: Layer 1 against the published schema the
-  document's `$schema` names, then Layer 2 against its page type's
-  catalogue (see `detectSheetType`). Returns
+  document's declared release bundles for its page type, then Layer 2
+  against that page type's catalogue (see `detectSheetType`), with the
+  rules that apply from that release. Returns
   `{ layer: 1, schemaErrors: SchemaError[] }` or
   `{ layer: 2, report: Report }`. The package bundles every published
-  schema, on both lines: the sheet-spec versions of each release and the
-  legacy format 0.9 schemas. A `$schema` naming a version the package
-  does not bundle fails Layer 1 with a single error at `/$schema`
-  (keyword `$schema`); the document is not validated against another
-  version. A document with no `$schema` is validated against the schema
-  its `release` or `format_version` leads to.
+  schema, on both lines. A `release` the manifest does not list fails
+  Layer 1 with a single error at `/release` (keyword `release`). A
+  `$schema` that disagrees with the release is a Layer 2 finding. Legacy
+  sheets (`format_version`) are validated against the schema their
+  `$schema` names, or the legacy schema when it is absent.
   Layer 1 runs validators compiled ahead of time at
   package build, so the pipeline needs no runtime code generation and
   runs under Cloudflare Workers and strict Content Security Policies.

package/dist/catalogue.js

@@ -15,6 +15,8 @@ import { pdpE013 } from "./rules/pdp-e-013.js";
 import { pdpE014 } from "./rules/pdp-e-014.js";
 import { pdpE015 } from "./rules/pdp-e-015.js";
 import { pdpE016 } from "./rules/pdp-e-016.js";
+import { pdpE017 } from "./rules/pdp-e-017.js";
+import { pdpE018 } from "./rules/pdp-e-018.js";
 import { pdpW001 } from "./rules/pdp-w-001.js";
 import { pdpW002 } from "./rules/pdp-w-002.js";
 import { pdpW003 } from "./rules/pdp-w-003.js";
@@ -65,6 +67,6 @@ import { pdpI001 } from "./rules/pdp-i-001.js";
 export const commerceCatalogue = {
     vertical: "commerce",
     releases: KNOWN_RELEASES,
-    catalogueVersion: "0.15.0",
-    rules: [pdpE001, pdpE002, pdpE003, pdpE004, pdpE005, pdpE006, pdpE007, pdpE008, pdpE009, pdpE010, pdpE011, pdpE012, pdpE013, pdpE014, pdpE015, pdpE016, pdpW001, pdpW002, pdpW003, pdpW004, pdpW005, pdpW006, pdpW007, pdpW008, pdpW009, pdpW010, pdpW011, pdpW012, pdpW013, pdpW014, pdpW015, pdpW016, pdpW017, pdpW018, pdpW019, pdpW020, pdpW021, pdpW022, pdpW023, pdpW024, pdpW025, pdpW026, pdpW027, pdpW028, pdpW029, pdpW030, pdpW031, pdpW032, pdpW033, pdpW034, pdpW035, pdpW036, pdpW037, pdpW038, pdpW039, pdpI001],
+    catalogueVersion: "0.16.1",
+    rules: [pdpE001, pdpE002, pdpE003, pdpE004, pdpE005, pdpE006, pdpE007, pdpE008, pdpE009, pdpE010, pdpE011, pdpE012, pdpE013, pdpE014, pdpE015, pdpE016, pdpE017, pdpE018, pdpW001, pdpW002, pdpW003, pdpW004, pdpW005, pdpW006, pdpW007, pdpW008, pdpW009, pdpW010, pdpW011, pdpW012, pdpW013, pdpW014, pdpW015, pdpW016, pdpW017, pdpW018, pdpW019, pdpW020, pdpW021, pdpW022, pdpW023, pdpW024, pdpW025, pdpW026, pdpW027, pdpW028, pdpW029, pdpW030, pdpW031, pdpW032, pdpW033, pdpW034, pdpW035, pdpW036, pdpW037, pdpW038, pdpW039, pdpI001],
 };

package/dist/generated/release-manifest.d.ts

@@ -10,6 +10,14 @@ export declare const RELEASE_MANIFEST: {
             readonly product: "0.9.0";
             readonly organization: "0.3.0";
         };
+    }, {
+        readonly release: "0.4.0";
+        readonly date: "2026-10-02";
+        readonly vocabulary: "0.4.0";
+        readonly sheets: {
+            readonly product: "0.10.0";
+            readonly organization: "0.4.0";
+        };
     }];
     readonly legacy: {
         readonly envelope_field: "format_version";

package/dist/generated/release-manifest.js

@@ -12,6 +12,15 @@ export const RELEASE_MANIFEST = {
                 "product": "0.9.0",
                 "organization": "0.3.0"
             }
+        },
+        {
+            "release": "0.4.0",
+            "date": "2026-10-02",
+            "vocabulary": "0.4.0",
+            "sheets": {
+                "product": "0.10.0",
+                "organization": "0.4.0"
+            }
         }
     ],
     "legacy": {

package/dist/generated/schema-ids.js

@@ -1,7 +1,9 @@
 // Generated by scripts/bundle-schemas.mjs; do not edit, do not commit.
 export const SCHEMA_IDS = [
     "https://themachineweb.org/pagefront/spec/commerce/organization/v0.3.0.json",
+    "https://themachineweb.org/pagefront/spec/commerce/organization/v0.4.0.json",
     "https://themachineweb.org/pagefront/spec/commerce/organization/v0.9.json",
+    "https://themachineweb.org/pagefront/spec/commerce/product/v0.10.0.json",
     "https://themachineweb.org/pagefront/spec/commerce/product/v0.9.0.json",
     "https://themachineweb.org/pagefront/spec/commerce/product/v0.9.json"
 ];