eslint-plugin-sfmc 0.1.3 → 1.0.0

package/README.md

@@ -17,11 +17,11 @@ Requires ESLint 9+ (flat config).
 import sfmc from 'eslint-plugin-sfmc';
 
 export default [
-    // Lint standalone .ampscript/.amp and .ssjs files
-    ...sfmc.configs.recommended,
+  // Lint standalone .ampscript/.amp and .ssjs files
+  ...sfmc.configs.recommended,
 
-    // Lint AMPscript + SSJS embedded in .html files
-    ...sfmc.configs.embedded,
+  // Lint AMPscript + SSJS embedded in .html files
+  ...sfmc.configs.embedded,
 ];
 ```
 
@@ -39,52 +39,49 @@ export default [
 
 ## AMPscript Rules (`amp-*`)
 
-| Rule                                    | Default | Description                                         |
-| --------------------------------------- | ------- | --------------------------------------------------- |
-| [`sfmc/amp-no-unknown-function`](docs/rules/amp/no-unknown-function.md)          | `error` | Disallow calls to unknown AMPscript functions       |
-| [`sfmc/amp-function-arity`](docs/rules/amp/function-arity.md)               | `error` | Enforce correct argument counts                     |
-| [`sfmc/amp-set-requires-target`](docs/rules/amp/set-requires-target.md)          | `error` | Require `set` to have a target variable             |
-| [`sfmc/amp-no-smart-quotes`](docs/rules/amp/no-smart-quotes.md)              | `error` | Disallow smart/curly quotes in strings              |
-| [`sfmc/amp-no-var-redeclaration`](docs/rules/amp/no-var-redeclaration.md)         | `warn`  | Disallow re-declaring a variable with `var`         |
-| [`sfmc/amp-no-empty-block`](docs/rules/amp/no-empty-block.md)               | `warn`  | Disallow empty `%%[ ]%%` blocks                     |
-| [`sfmc/amp-no-loop-counter-assign`](docs/rules/amp/no-loop-counter-assign.md)       | `warn`  | Disallow assigning to the `for` loop counter        |
-| [`sfmc/amp-no-inline-statement`](docs/rules/amp/no-inline-statement.md)          | `warn`  | Disallow statements inside inline expressions       |
-| [`sfmc/amp-no-deprecated-function`](docs/rules/amp/no-deprecated-function.md)       | `warn`  | Flag deprecated functions and suggest replacements  |
-| [`sfmc/amp-naming-convention`](docs/rules/amp/naming-convention.md)            | `warn`  | Enforce variable naming convention                  |
-| [`sfmc/amp-no-empty-then`](docs/rules/amp/no-empty-then.md)                | `warn`  | Disallow IF with empty THEN branch                  |
-| [`sfmc/amp-require-rowcount-check`](docs/rules/amp/require-rowcount-check.md)       | `warn`  | Require RowCount check before FOR on LookupRows     |
-| [`sfmc/amp-no-html-comment`](docs/rules/amp/no-html-comment.md)                | `warn`  | Disallow HTML comments inside AMPscript blocks      |
-| [`sfmc/amp-no-js-line-comment`](docs/rules/amp/no-js-line-comment.md)            | `warn`  | Disallow JS-style `//` line comments in AMPscript   |
-| [`sfmc/amp-no-nested-script-tag`](docs/rules/amp/no-nested-script-tag.md)         | `error` | Disallow `<script>` tags nested inside AMPscript script tags |
+| Rule                                                                                        | Default | Description                                                  |
+| ------------------------------------------------------------------------------------------- | ------- | ------------------------------------------------------------ |
+| [`sfmc/amp-no-unknown-function`](docs/rules/amp/no-unknown-function.md)                     | `error` | Disallow calls to unknown AMPscript functions                |
+| [`sfmc/amp-function-arity`](docs/rules/amp/function-arity.md)                               | `error` | Enforce correct argument counts                              |
+| [`sfmc/amp-set-requires-target`](docs/rules/amp/set-requires-target.md)                     | `error` | Require `set` to have a target variable                      |
+| [`sfmc/amp-no-smart-quotes`](docs/rules/amp/no-smart-quotes.md)                             | `error` | Disallow smart/curly quotes in strings                       |
+| [`sfmc/amp-no-var-redeclaration`](docs/rules/amp/no-var-redeclaration.md)                   | `warn`  | Disallow re-declaring a variable with `var`                  |
+| [`sfmc/amp-no-empty-block`](docs/rules/amp/no-empty-block.md)                               | `warn`  | Disallow empty `%%[ ]%%` blocks                              |
+| [`sfmc/amp-no-loop-counter-assign`](docs/rules/amp/no-loop-counter-assign.md)               | `warn`  | Disallow assigning to the `for` loop counter                 |
+| [`sfmc/amp-no-inline-statement`](docs/rules/amp/no-inline-statement.md)                     | `warn`  | Disallow statements inside inline expressions                |
+| [`sfmc/amp-no-deprecated-function`](docs/rules/amp/no-deprecated-function.md)               | `warn`  | Flag deprecated functions and suggest replacements           |
+| [`sfmc/amp-naming-convention`](docs/rules/amp/naming-convention.md)                         | `warn`  | Enforce variable naming convention                           |
+| [`sfmc/amp-no-empty-then`](docs/rules/amp/no-empty-then.md)                                 | `warn`  | Disallow IF with empty THEN branch                           |
+| [`sfmc/amp-require-rowcount-check`](docs/rules/amp/require-rowcount-check.md)               | `warn`  | Require RowCount check before FOR on LookupRows              |
+| [`sfmc/amp-no-html-comment`](docs/rules/amp/no-html-comment.md)                             | `warn`  | Disallow HTML comments inside AMPscript blocks               |
+| [`sfmc/amp-no-js-line-comment`](docs/rules/amp/no-js-line-comment.md)                       | `warn`  | Disallow JS-style `//` line comments in AMPscript            |
+| [`sfmc/amp-no-nested-script-tag`](docs/rules/amp/no-nested-script-tag.md)                   | `error` | Disallow `<script>` tags nested inside AMPscript script tags |
 | [`sfmc/amp-no-nested-ampscript-delimiter`](docs/rules/amp/no-nested-ampscript-delimiter.md) | `error` | Disallow AMPscript delimiters nested inside AMPscript blocks |
-| [`sfmc/amp-prefer-attribute-value`](docs/rules/amp/prefer-attribute-value.md)       | off     | Prefer `AttributeValue()` over bare personalization |
-| [`sfmc/amp-require-variable-declaration`](docs/rules/amp/require-variable-declaration.md) | off     | Require `var` before `set`                          |
-| [`sfmc/amp-no-email-excluded-function`](docs/rules/amp/no-email-excluded-function.md)   | off     | Flag functions unavailable in email context         |
+| [`sfmc/amp-prefer-attribute-value`](docs/rules/amp/prefer-attribute-value.md)               | off     | Prefer `AttributeValue()` over bare personalization          |
+| [`sfmc/amp-require-variable-declaration`](docs/rules/amp/require-variable-declaration.md)   | off     | Require `var` before `set`                                   |
+| [`sfmc/amp-no-email-excluded-function`](docs/rules/amp/no-email-excluded-function.md)       | off     | Flag functions unavailable in email context                  |
 
 ## SSJS Rules (`ssjs-*`)
 
-| Rule                                     | Default | Description                                          |
-| ---------------------------------------- | ------- | ---------------------------------------------------- |
-| [`sfmc/ssjs-require-platform-load`](docs/rules/ssjs/require-platform-load.md)        | `error` | Require `Platform.Load("core")` before Core usage    |
-| [`sfmc/ssjs-no-unsupported-syntax`](docs/rules/ssjs/no-unsupported-syntax.md)        | `error` | Flag ES6+ syntax not supported by SFMC               |
-| [`sfmc/ssjs-no-unknown-platform-function`](docs/rules/ssjs/no-unknown-platform-function.md) | `error` | Disallow unknown `Platform.Function.*` methods       |
-| [`sfmc/ssjs-platform-function-arity`](docs/rules/ssjs/platform-function-arity.md)      | `error` | Enforce correct arity for `Platform.Function.*`      |
-| [`sfmc/ssjs-no-unknown-http-method`](docs/rules/ssjs/no-unknown-http-method.md)       | `error` | Disallow unknown `HTTP.*` methods                    |
-| [`sfmc/ssjs-no-unknown-platform-variable`](docs/rules/ssjs/no-unknown-platform-variable.md) | `error` | Disallow unknown `Platform.Variable.*` methods       |
-| [`sfmc/ssjs-no-unknown-platform-response`](docs/rules/ssjs/no-unknown-platform-response.md) | `error` | Disallow unknown `Platform.Response.*` methods       |
-| [`sfmc/ssjs-no-unknown-platform-request`](docs/rules/ssjs/no-unknown-platform-request.md)  | `error` | Disallow unknown `Platform.Request.*` methods        |
-| [`sfmc/ssjs-require-platform-load-order`](docs/rules/ssjs/require-platform-load-order.md)  | `error` | Require `Platform.Load()` before Core usage in order |
-| [`sfmc/ssjs-no-hardcoded-credentials`](docs/rules/ssjs/no-hardcoded-credentials.md)     | `error` | Flag hardcoded keys in encryption calls              |
-| [`sfmc/ssjs-no-unknown-platform-client-browser`](docs/rules/ssjs/no-unknown-platform-client-browser.md) | `error` | Disallow unknown `Platform.ClientBrowser.*` methods  |
-| [`sfmc/ssjs-no-unknown-core-method`](docs/rules/ssjs/no-unknown-core-method.md)       | `warn`  | Disallow unknown methods on Core library objects     |
-| [`sfmc/ssjs-no-unknown-wsproxy-method`](docs/rules/ssjs/no-unknown-wsproxy-method.md)    | `warn`  | Disallow unknown WSProxy methods                     |
-| [`sfmc/ssjs-cache-loop-length`](docs/rules/ssjs/cache-loop-length.md)            | `warn`  | Require caching `.length` in for-loops               |
-| [`sfmc/ssjs-require-hasownproperty`](docs/rules/ssjs/require-hasownproperty.md)       | `warn`  | Require `hasOwnProperty` guard in for-in loops       |
-| [`sfmc/ssjs-prefer-platform-load-version`](docs/rules/ssjs/prefer-platform-load-version.md) | `warn`  | Enforce a minimum `Platform.Load` version string     |
-| [`sfmc/ssjs-no-unavailable-method`](docs/rules/ssjs/no-unavailable-method.md)        | `warn`  | Flag Array/String methods unavailable or broken in SFMC's ES3 engine |
-| [`sfmc/ssjs-prefer-parsejson-safe-arg`](docs/rules/ssjs/prefer-parsejson-safe-arg.md)    | `warn`  | Require string coercion on `ParseJSON` argument      |
-| [`sfmc/ssjs-no-switch-default`](docs/rules/ssjs/no-switch-default.md)            | `warn`  | Disallow `default` clause in `switch` statements     |
-| [`sfmc/ssjs-no-treatascontent-injection`](docs/rules/ssjs/no-treatascontent-injection.md)  | `warn`  | Flag dynamic string concatenation in `TreatAsContent` calls |
+| Rule                                                                                                    | Default | Description                                                          |
+| ------------------------------------------------------------------------------------------------------- | ------- | -------------------------------------------------------------------- |
+| [`sfmc/ssjs-require-platform-load`](docs/rules/ssjs/require-platform-load.md)                           | `error` | Require `Platform.Load("core")` before Core or requiresCoreLoad globals |
+| [`sfmc/ssjs-no-unsupported-syntax`](docs/rules/ssjs/no-unsupported-syntax.md)                           | `error` | Flag ES6+ syntax not supported by SFMC                               |
+| [`sfmc/ssjs-no-unknown-function`](docs/rules/ssjs/no-unknown-function.md)                               | `error` | Disallow unknown methods on Platform.*, HTTP, Core Library, and WSProxy |
+| [`sfmc/ssjs-no-deprecated-function`](docs/rules/ssjs/no-deprecated-function.md)                         | `error` | Flag use of deprecated SFMC SSJS APIs (e.g. ContentArea, ContentAreaObj) |
+| [`sfmc/ssjs-no-property-call`](docs/rules/ssjs/no-property-call.md)                                     | `error` | Disallow calling Platform.Request/Response properties as functions   |
+| [`sfmc/ssjs-platform-function-arity`](docs/rules/ssjs/platform-function-arity.md)                       | `error` | Enforce correct arity for `Platform.Function.*`                      |
+| [`sfmc/ssjs-require-platform-load-order`](docs/rules/ssjs/require-platform-load-order.md)               | `error` | Require `Platform.Load()` before Core usage in order                 |
+| [`sfmc/ssjs-no-hardcoded-credentials`](docs/rules/ssjs/no-hardcoded-credentials.md)                     | `error` | Flag hardcoded keys in encryption calls                              |
+| [`sfmc/ssjs-cache-loop-length`](docs/rules/ssjs/cache-loop-length.md)                                   | `warn`  | Require caching `.length` in for-loops                               |
+| [`sfmc/ssjs-require-hasownproperty`](docs/rules/ssjs/require-hasownproperty.md)                         | `warn`  | Require `hasOwnProperty` guard in for-in loops                       |
+| [`sfmc/ssjs-prefer-platform-load-version`](docs/rules/ssjs/prefer-platform-load-version.md)             | `warn`  | Enforce a minimum `Platform.Load` version string                     |
+| [`sfmc/ssjs-no-unavailable-method`](docs/rules/ssjs/no-unavailable-method.md)                           | `warn`  | Flag Array/String methods unavailable or broken in SFMC's ES3 engine |
+| [`sfmc/ssjs-prefer-parsejson-safe-arg`](docs/rules/ssjs/prefer-parsejson-safe-arg.md)                   | `warn`  | Require string coercion on `ParseJSON` argument                      |
+| [`sfmc/ssjs-no-switch-default`](docs/rules/ssjs/no-switch-default.md)                                   | `warn`  | Disallow `default` clause in `switch` statements                     |
+| [`sfmc/ssjs-no-treatascontent-injection`](docs/rules/ssjs/no-treatascontent-injection.md)               | `warn`  | Flag dynamic string concatenation in `TreatAsContent` calls          |
+| [`sfmc/ssjs-core-method-arity`](docs/rules/ssjs/core-method-arity.md)                                   | `warn`  | Enforce correct argument counts for Core Library object methods      |
+| [`sfmc/ssjs-arg-types`](docs/rules/ssjs/arg-types.md)                                                   | `warn`  | Check that literal arguments match expected parameter types          |
 
 ## Processors
 
@@ -94,7 +91,6 @@ export default [
 | `sfmc/ssjs`      | Extract `<script runat="server">` (non-ampscript)             |
 | `sfmc/sfmc`      | Combined: extracts both AMPscript and SSJS from HTML          |
 
-
 ## License
 
 MIT

package/docs/rules/ssjs/arg-types.md

@@ -0,0 +1,72 @@
+# `sfmc/ssjs-arg-types`
+
+> Check that literal arguments match the expected parameter types for SSJS functions and methods.
+
+| | |
+|---|---|
+| **Type** | `suggestion` |
+| **Default severity** | `warn` in `recommended` and `strict` |
+| **Fixable** | — |
+
+## Why This Rule Exists
+
+Many SSJS functions and methods have documented parameter types (`string`, `number`, `boolean`, `object`, `string[]`, etc.). Passing a literal value of the wrong type (e.g. a number where a string is required) is a common source of runtime errors. This rule validates every literal argument against the expected type declared in the ssjs-data catalog.
+
+Only literal values are checked — variables, function call results, and other non-literal expressions are always treated as valid because their types cannot be determined statically.
+
+## Coverage
+
+| Namespace | Example |
+|---|---|
+| `Platform.Function.*` | `Platform.Function.Lookup("MyDE", "Value", "Key", 42)` |
+| `Platform.Variable.*` | `Platform.Variable.SetValue("varName", value)` |
+| `Platform.Response.*` | `Platform.Response.SetResponseHeader("X-Header", 123)` |
+| `Platform.Request.*` | `Platform.Request.GetQueryStringParameter(0)` |
+| `Platform.Recipient.*` | `Platform.Recipient.GetAttributeValue(true)` |
+| `HTTP.*` | `HTTP.Get(42)` |
+| `HTTPHeader.*` | `HTTPHeader.SetValue("Content-Type", value)` |
+| `Attribute.*` | `Attribute.GetValue(false)` |
+| `WSProxy` instance methods | `proxy.retrieve(42, fieldArray, filter)` |
+| Core Library static | `DataExtension.Init(123)` |
+| Core Library instance | `de.Add(true)` |
+| Global (`Format`, `String`, `Error`) | `Format(42, true)` |
+
+## Settings
+
+| Setting | Values | Default |
+|---------|--------|---------|
+| severity | `"error"` \| `"warn"` \| `"off"` | `"warn"` |
+
+This rule has no configuration options.
+
+## Examples
+
+**Not allowed:**
+
+```js
+/* Platform.Function.Lookup expects string for first arg */
+var val = Platform.Function.Lookup(42, "Value", "Key", keyValue);
+
+/* DataExtension.Init expects a string name, not a number */
+var de = DataExtension.Init(123);
+
+/* BounceEvent.Retrieve expects an object filter, not a string */
+var rows = BounceEvent.Retrieve("all");
+```
+
+**Allowed:**
+
+```js
+var val = Platform.Function.Lookup("MyDE", "Value", "Key", keyValue);
+
+var de = DataExtension.Init("MyDE");
+
+var rows = BounceEvent.Retrieve({ Property: "ID", SimpleOperator: "isNotNull", Value: "" });
+```
+
+## When to Disable
+
+```js
+// eslint.config.js
+rules: { 'sfmc/ssjs-arg-types': 'off' }
+```

package/docs/rules/ssjs/core-method-arity.md

@@ -0,0 +1,72 @@
+# `sfmc/ssjs-core-method-arity`
+
+> Enforce correct argument counts for Core Library object method calls.
+
+| | |
+|---|---|
+| **Type** | `problem` |
+| **Default severity** | `warn` in `recommended`; `error` in `strict` |
+| **Fixable** | — |
+
+## Why This Rule Exists
+
+Every method on a Core Library object has a documented minimum and maximum argument count. Passing too few arguments causes a runtime error; passing too many may fail silently or behave unexpectedly. This rule validates every Core Library method call against the known min/max argument counts from the ssjs-data catalog.
+
+## Coverage
+
+Both **static** and **instance** call styles are covered:
+
+| Style | Example |
+|---|---|
+| Instance | `var de = DataExtension.Init("MyDE"); de.Add(row);` |
+| Static single-name | `BounceEvent.Retrieve(filter);` |
+| Static multi-part | `DataExtension.Rows.Add(rowObj);` |
+| Deep chain | `TriggeredSend.Tracking.Clicks.Retrieve(filter);` |
+
+Covered Core Library classes: `Account`, `Account.Tracking`, `AccountUser`, `Portfolio`, `ContentAreaObj`, `Folder`, `Template`, `DeliveryProfile`, `SenderProfile`, `SendClassification`, `FilterDefinition`, `QueryDefinition`, `List`, `List.Subscribers`, `List.Subscribers.Tracking`, `Subscriber`, `Subscriber.Attributes`, `Subscriber.Lists`, `Email`, `Send`, `Send.Tracking`, `Send.Definition`, `TriggeredSend`, `TriggeredSend.Tracking`, `TriggeredSend.Tracking.Clicks`, `TriggeredSend.Tracking.TotalByInterval`, `DataExtension`, `DataExtension.Fields`, `DataExtension.Rows`, `DateTime.TimeZone` — and event classes: `BounceEvent`, `ClickEvent`, `OpenEvent`, `SentEvent`, `UnsubEvent`, `ForwardedEmailEvent`, `ForwardedEmailOptInEvent`, `SurveyEvent`.
+
+## Settings
+
+| Setting | Values | Default |
+|---------|--------|---------|
+| severity | `"error"` \| `"warn"` \| `"off"` | `"warn"` (`"error"` in `strict`) |
+
+This rule has no configuration options.
+
+## Examples
+
+**Not allowed:**
+
+```js
+Platform.Load("core", "1.1.5");
+
+/* DataExtension.Rows.Add requires exactly 1 argument */
+DataExtension.Rows.Add("MyDE", extraArg);
+
+/* BounceEvent.Retrieve requires exactly 1 argument */
+BounceEvent.Retrieve();
+
+/* de.Add requires exactly 1 argument */
+var de = DataExtension.Init("MyDE");
+de.Add(rowObj, extraArg);
+```
+
+**Allowed:**
+
+```js
+Platform.Load("core", "1.1.5");
+
+DataExtension.Rows.Add(rowObj);
+
+BounceEvent.Retrieve({ Property: "ID", SimpleOperator: "isNotNull", Value: "" });
+
+var de = DataExtension.Init("MyDE");
+de.Add(rowObj);
+```
+
+## When to Disable
+
+```js
+// eslint.config.js
+rules: { 'sfmc/ssjs-core-method-arity': 'off' }
+```

package/docs/rules/ssjs/no-deprecated-function.md

@@ -0,0 +1,56 @@
+# ssjs-no-deprecated-function
+
+Flags calls to deprecated SFMC SSJS APIs. Currently focuses on the **Content Areas** feature,
+which has been retired and no longer allows creating or updating content.
+
+## What is flagged
+
+| API | Reason |
+|---|---|
+| `ContentArea(…)` | Global alias; Content Areas are deprecated |
+| `ContentAreaByName(…)` | Global alias; Content Areas are deprecated |
+| `Platform.Function.ContentArea(…)` | Content Areas are deprecated |
+| `Platform.Function.ContentAreaByName(…)` | Content Areas are deprecated |
+| `ContentAreaObj.Init(…)` | ContentAreaObj class is deprecated |
+| `ContentAreaObj.Add(…)` | ContentAreaObj class is deprecated |
+| `ContentAreaObj.Retrieve(…)` | ContentAreaObj class is deprecated |
+| `<contentAreaVar>.Update(…)` | Instance method on a deprecated ContentAreaObj variable |
+| `<contentAreaVar>.Remove()` | Instance method on a deprecated ContentAreaObj variable |
+
+## Examples
+
+### ❌ Incorrect
+
+```js
+// Global alias — deprecated
+var html = ContentAreaByName('Public Content/MyBlock');
+
+// Platform.Function — deprecated
+var content = Platform.Function.ContentArea(12345);
+
+// ContentAreaObj static method — deprecated
+var results = ContentAreaObj.Retrieve({
+    Property: 'CustomerKey',
+    SimpleOperator: 'equals',
+    Value: 'myCA',
+});
+
+// ContentAreaObj instance — deprecated
+var area = ContentAreaObj.Init('myCA');
+var status = area.Update({ Name: 'Updated Name' });
+```
+
+### ✅ Correct
+
+```js
+// Use Content Builder blocks via Platform.Function.ContentBlockByKey / ContentBlockById
+var html = Platform.Function.ContentBlockByKey('Public Content/MyBlock');
+var content = Platform.Function.ContentBlockById(12345);
+```
+
+## Rule details
+
+- **Type:** `suggestion`
+- **Fixable:** No
+- **Recommended:** Yes
+- **Strict:** Yes

package/docs/rules/ssjs/no-property-call.md

@@ -0,0 +1,95 @@
+# ssjs-no-property-call
+
+Flags `Platform.Request` and `Platform.Response` members that are **properties**, not functions.
+Calling them with parentheses `()` is a runtime error — they must be accessed without parentheses.
+
+The rule is fixable:
+
+- **No-arg calls** (`Property()`) → removes the `()` on both `Request` and `Response` properties.
+- **Single-arg calls on `Platform.Response.*`** (`ContentType("text/html")`) → rewrites to an assignment (`= value`), because those two properties are read/write.
+- **Any-arg calls on `Platform.Request.*`** → reported as an error with no auto-fix, because `Request` properties are read-only.
+
+## Properties affected
+
+### `Platform.Request` — read-only
+
+| Property |
+|---|
+| `Browser` |
+| `ClientIP` |
+| `HasSSL` |
+| `IsSSL` |
+| `Method` |
+| `QueryString` |
+| `ReferrerURL` |
+| `RequestURL` |
+| `UserAgent` |
+
+### `Platform.Response` — read/write
+
+| Property |
+|---|
+| `ContentType` |
+| `CharacterSet` |
+
+## Examples
+
+### ❌ Incorrect — reading a property with `()`
+
+```js
+var method = Platform.Request.Method();   // ← runtime error
+var ip     = Platform.Request.ClientIP(); // ← runtime error
+var ct     = Platform.Response.ContentType(); // ← runtime error
+```
+
+Auto-fix removes the parentheses:
+
+```js
+var method = Platform.Request.Method;
+var ip     = Platform.Request.ClientIP;
+var ct     = Platform.Response.ContentType;
+```
+
+### ❌ Incorrect — setting a `Platform.Response` property via function call
+
+```js
+Platform.Response.ContentType("application/json"); // ← should be an assignment
+Platform.Response.CharacterSet("UTF-8");           // ← should be an assignment
+```
+
+Auto-fix converts to an assignment statement:
+
+```js
+Platform.Response.ContentType = "application/json";
+Platform.Response.CharacterSet = "UTF-8";
+```
+
+### ❌ Incorrect — attempting to set a read-only `Platform.Request` property (no fix)
+
+```js
+Platform.Request.Method("POST"); // ← read-only, cannot be set
+```
+
+### ✅ Correct
+
+```js
+// Reading properties — no parentheses
+var method = Platform.Request.Method;
+var ip     = Platform.Request.ClientIP;
+var ct     = Platform.Response.ContentType;
+
+// Setting writable Response properties — use assignment
+Platform.Response.ContentType = "application/json";
+Platform.Response.CharacterSet = "UTF-8";
+
+// Calling real methods — parentheses are correct
+Platform.Request.GetQueryStringParameter("id");
+Platform.Response.Write("<p>Hello</p>");
+```
+
+## Rule details
+
+- **Type:** `problem`
+- **Fixable:** Yes (`code`)
+- **Recommended:** Yes
+- **Strict:** Yes

package/docs/rules/ssjs/no-unknown-function.md

@@ -0,0 +1,57 @@
+# ssjs-no-unknown-function
+
+Flags calls to SFMC API methods that do not exist in the catalog. This single rule replaces the seven narrow `no-unknown-*` rules from earlier versions of the plugin.
+
+## Covered namespaces
+
+| Namespace | Example |
+|---|---|
+| `Platform.Function` | `Platform.Function.LookupRows(…)` |
+| `Platform.Variable` | `Platform.Variable.GetValue(…)` |
+| `Platform.Request` | `Platform.Request.GetQueryStringParameter(…)` |
+| `Platform.Response` | `Platform.Response.Write(…)` |
+| `Platform.Recipient` | `Platform.Recipient.GetAttributeValue(…)` |
+| `HTTP` | `HTTP.Get(…)` |
+| Core Library instance methods | `de.Rows.Retrieve()` (tracked from `DataExtension.Init(…)`) |
+| WSProxy instance methods | `api.retrieve(…)` (tracked from `new Script.Util.WSProxy()`) |
+
+## Examples
+
+### ❌ Incorrect
+
+```js
+// Typo in Platform.Function method name
+Platform.Function.FetchRows('MyDE', 'Status', 'Active');
+
+// Non-existent WSProxy method
+var api = new Script.Util.WSProxy();
+api.getAllResults({ ObjectType: 'DataExtension' });
+
+// Unknown Core Library method on a DataExtension instance
+var de = DataExtension.Init('CustomerData');
+de.ExportRows();
+```
+
+### ✅ Correct
+
+```js
+Platform.Function.LookupRows('MyDE', 'Status', 'Active');
+
+var api = new Script.Util.WSProxy();
+api.retrieve({ ObjectType: 'DataExtension' }, ['CustomerKey', 'Name'], {});
+
+var de = DataExtension.Init('CustomerData');
+de.Rows.Retrieve();
+```
+
+## When to use
+
+Enable this rule to catch typos, outdated method names, and unsupported API calls before
+they cause runtime failures.
+
+## Rule details
+
+- **Type:** `problem`
+- **Fixable:** No
+- **Recommended:** Yes
+- **Strict:** Yes

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "eslint-plugin-sfmc",
-    "version": "0.1.3",
-    "description": "ESLint plugin for Salesforce Marketing Cloud — AMPscript and Server-Side JavaScript (SSJS)",
+    "version": "1.0.0",
+    "description": "ESLint plugin for Salesforce Marketing Cloud — AMPscript and Server-Side JavaScript (SSJS)",
     "type": "module",
     "main": "src/index.js",
     "exports": {
@@ -34,19 +34,32 @@
     "dependencies": {
         "ampscript-data": "^0.1.3",
         "ampscript-parser": "^0.1.1",
-        "ssjs-data": "^0.2.2"
+        "ssjs-data": "^0.3.1"
     },
     "peerDependencies": {
         "eslint": ">=9.0.0"
     },
     "scripts": {
-        "test": "node --test tests/rules.test.js"
+        "test": "node --test tests/rules.test.js",
+        "lint": "eslint .",
+        "lint:fix": "eslint --fix .",
+        "prepare": "husky || true",
+        "format": "prettier --write .",
+        "format:check": "prettier --check ."
     },
     "license": "MIT",
     "engines": {
         "node": ">=18.0.0"
     },
     "devDependencies": {
-        "eslint": "^10.1.0"
+        "@eslint/js": "^10.0.1",
+        "eslint": "^10.1.0",
+        "eslint-config-prettier": "^10.1.8",
+        "eslint-plugin-jsdoc": "^62.0.0",
+        "eslint-plugin-prettier": "^5.5.0",
+        "eslint-plugin-unicorn": "^64.0.0",
+        "globals": "^17.4.0",
+        "husky": "^9.1.7",
+        "prettier": "^3.8.2"
     }
 }

package/src/ampscript-parser.js

@@ -74,8 +74,11 @@ function offsetToLoc(offset, lineStarts) {
     let hi = lineStarts.length - 1;
     while (lo < hi) {
         const mid = (lo + hi + 1) >> 1;
-        if (lineStarts[mid] <= offset) lo = mid;
-        else hi = mid - 1;
+        if (lineStarts[mid] <= offset) {
+            lo = mid;
+        } else {
+            hi = mid - 1;
+        }
     }
     return { line: lo + 1, column: offset - lineStarts[lo] };
 }
@@ -83,7 +86,9 @@ function offsetToLoc(offset, lineStarts) {
 // ── AST annotation ────────────────────────────────────────────────────────
 
 function annotateNode(node, lineStarts, comments) {
-    if (!node || typeof node !== 'object') return;
+    if (!node || typeof node !== 'object') {
+        return;
+    }
 
     // Rename colliding ESTree types to Amp-prefixed equivalents
     if (node.type && NODE_RENAME[node.type]) {
@@ -103,7 +108,9 @@ function annotateNode(node, lineStarts, comments) {
     }
 
     const keys = visitorKeys[node.type];
-    if (!keys) return;
+    if (!keys) {
+        return;
+    }
 
     for (const key of keys) {
         const child = node[key];

package/src/ampscript-processor.js

@@ -17,7 +17,9 @@ const SCRIPT_CLOSE_G = /<\/script\s*>/gi;
 function countNewlinesBefore(text, pos) {
     let count = 0;
     for (let index = 0; index < pos; index++) {
-        if (text[index] === '\n') count++;
+        if (text[index] === '\n') {
+            count++;
+        }
     }
     return count;
 }
@@ -73,7 +75,9 @@ export function preprocess(text, filename) {
                 }
             }
 
-            if (depth !== 0) continue;
+            if (depth !== 0) {
+                continue;
+            }
 
             const fullBlock = text.slice(blockStart, index);
             const padding = '\n'.repeat(countNewlinesBefore(text, blockStart));
@@ -100,7 +104,9 @@ export function preprocess(text, filename) {
                 index++;
             }
 
-            if (!found) continue;
+            if (!found) {
+                continue;
+            }
 
             // Wrap in %%[ ]%% so the AMPscript parser receives valid block syntax.
             // %%[ is 3 chars, same as %%= — column offsets for inner code are preserved.