ata-validator 0.13.1 → 0.13.2

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to ata-validator are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/), and this project adheres to semantic versioning.
 
+## 0.13.2 — 2026-05-09
+
+### Fixed
+
+- **Invalid validation crashed in environments without the native addon** (Cloudflare Workers, browsers, Bun without N-API). When the JS error-codegen probe couldn't produce a safe error function, `errFn` fell through to `this._compiled.validate(d)`. With no native addon `_compiled` stays `null`, so the call threw `TypeError: Cannot read properties of null (reading 'validate')`. Valid inputs were unaffected because they short-circuited before reaching `errFn`. The fallback now stays on a JS-only path when `native` isn't present, returning the boolean result with a generic detail-not-available error so callers see `{ valid: false, errors: [...] }` instead of a crash. Added `tests/test_no_native.js` (Workers-style sandbox) to lock the behavior. Fixes #22.
+
 ## 0.13.1 — 2026-05-09
 
 ### Fixed

package/index.js

@@ -566,23 +566,37 @@ class Validator {
           safeErrFn = (d) => jsErrFn(d, true);
         } catch {}
       }
-      // errFn: use JS codegen if safe, else lazy-native fallback
-      // For unevaluated schemas without errFn, use jsFn as boolean-only fallback
+      // errFn: use JS codegen if safe, else native fallback (only when native
+      // is available). Environments without the native addon — Cloudflare
+      // Workers, browser, Bun without N-API — get a JS-only fallback so the
+      // invalid path doesn't dereference a null _compiled.
       const hasUnevaluated = schemaObj && (schemaObj.unevaluatedProperties !== undefined || schemaObj.unevaluatedItems !== undefined || this._schemaStr.includes('unevaluatedProperties') || this._schemaStr.includes('unevaluatedItems'))
       const hasDynRef = this._schemaStr.includes('"$dynamicRef"') || this._schemaStr.includes('"$dynamicAnchor"')
+      const jsOnlyFallback = (d) => ({
+        valid: jsFn(d),
+        errors: jsFn(d) ? [] : [{
+          keyword: 'validation',
+          instancePath: '',
+          schemaPath: '',
+          params: {},
+          message: 'schema validation failed (detailed errors unavailable without native addon)'
+        }]
+      });
       const errFn =
         safeErrFn ||
         (hasUnevaluated
           ? (d) => ({ valid: jsFn(d), errors: jsFn(d) ? [] : [{ code: 'unevaluated', path: '', message: 'unevaluated property or item' }] })
-          : hasDynRef
-            ? (d) => {
-                this._ensureNative();
-                return this._compiled.validateJSON(JSON.stringify(d));
-              }
-            : (d) => {
-                this._ensureNative();
-                return this._compiled.validate(d);
-              });
+          : !native
+            ? jsOnlyFallback
+            : hasDynRef
+              ? (d) => {
+                  this._ensureNative();
+                  return this._compiled.validateJSON(JSON.stringify(d));
+                }
+              : (d) => {
+                  this._ensureNative();
+                  return this._compiled.validate(d);
+                });
 
       // Best path: combined validator (single pass, validates + collects errors)
       // Valid data: returns VALID_RESULT, no allocation

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ata-validator",
-  "version": "0.13.1",
+  "version": "0.13.2",
   "description": "Ultra-fast JSON Schema validator. 5x faster validation, 159,000x faster compilation. Works without native addon. Cross-schema $ref, Draft 2020-12 + Draft 7, V8-optimized JS codegen, simdjson, RE2, multi-core. Standard Schema V1 compatible.",
   "main": "index.js",
   "module": "index.mjs",
@@ -40,7 +40,7 @@
     "rebuild": "cmake-js rebuild --target ata",
     "prebuild": "pkg-prebuilds-copy --baseDir build/Release --source ata.node --name=ata --strip --napi_version=10",
     "prebuild-all": "npm run prebuild -- --arch x64 && npm run prebuild -- --arch arm64",
-    "test": "node test.js && node tests/test_aot_build.js && node tests/test_aot_differential.js && node tests/test_aot_cli_build.js && node tests/test_aot_cli_smoke.js",
+    "test": "node test.js && node tests/test_no_native.js && node tests/test_aot_build.js && node tests/test_aot_differential.js && node tests/test_aot_cli_build.js && node tests/test_aot_cli_smoke.js",
     "test:suite": "node tests/run_suite.js",
     "test:compat": "node tests/test_compat.js",
     "test:standard-schema": "node tests/test_standard_schema.js",