ata-validator 0.13.1 → 0.13.3

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes to ata-validator are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/), and this project adheres to semantic versioning.
 
+## 0.13.3 — 2026-05-13
+
+### Fixed
+
+- **`Validator.bundleStandalone` dropped hoisted anyOf/oneOf branch helpers from the bundle output.** Schemas whose codegen hoists branch functions like `_af1_b0` to the per-schema preamble (e.g. allOf wrapping an anyOf, or schemas pulled into a cross-`$ref` bundle) emitted JS that referenced these helpers without defining them, so loading the bundle threw `ReferenceError: _af1_b0 is not defined` on first validation. The standalone preamble now propagates through to the bundle alongside the format-closure serialization that was already there. `toStandalone` (single-schema) was unaffected. Fixes #24.
+
+## 0.13.2 — 2026-05-09
+
+### Fixed
+
+- **Invalid validation crashed in environments without the native addon** (Cloudflare Workers, browsers, Bun without N-API). When the JS error-codegen probe couldn't produce a safe error function, `errFn` fell through to `this._compiled.validate(d)`. With no native addon `_compiled` stays `null`, so the call threw `TypeError: Cannot read properties of null (reading 'validate')`. Valid inputs were unaffected because they short-circuited before reaching `errFn`. The fallback now stays on a JS-only path when `native` isn't present, returning the boolean result with a generic detail-not-available error so callers see `{ valid: false, errors: [...] }` instead of a crash. Added `tests/test_no_native.js` (Workers-style sandbox) to lock the behavior. Fixes #22.
+
 ## 0.13.1 — 2026-05-09
 
 ### Fixed

package/index.js

@@ -566,23 +566,37 @@ class Validator {
           safeErrFn = (d) => jsErrFn(d, true);
         } catch {}
       }
-      // errFn: use JS codegen if safe, else lazy-native fallback
-      // For unevaluated schemas without errFn, use jsFn as boolean-only fallback
+      // errFn: use JS codegen if safe, else native fallback (only when native
+      // is available). Environments without the native addon — Cloudflare
+      // Workers, browser, Bun without N-API — get a JS-only fallback so the
+      // invalid path doesn't dereference a null _compiled.
       const hasUnevaluated = schemaObj && (schemaObj.unevaluatedProperties !== undefined || schemaObj.unevaluatedItems !== undefined || this._schemaStr.includes('unevaluatedProperties') || this._schemaStr.includes('unevaluatedItems'))
       const hasDynRef = this._schemaStr.includes('"$dynamicRef"') || this._schemaStr.includes('"$dynamicAnchor"')
+      const jsOnlyFallback = (d) => ({
+        valid: jsFn(d),
+        errors: jsFn(d) ? [] : [{
+          keyword: 'validation',
+          instancePath: '',
+          schemaPath: '',
+          params: {},
+          message: 'schema validation failed (detailed errors unavailable without native addon)'
+        }]
+      });
       const errFn =
         safeErrFn ||
         (hasUnevaluated
           ? (d) => ({ valid: jsFn(d), errors: jsFn(d) ? [] : [{ code: 'unevaluated', path: '', message: 'unevaluated property or item' }] })
-          : hasDynRef
-            ? (d) => {
-                this._ensureNative();
-                return this._compiled.validateJSON(JSON.stringify(d));
-              }
-            : (d) => {
-                this._ensureNative();
-                return this._compiled.validate(d);
-              });
+          : !native
+            ? jsOnlyFallback
+            : hasDynRef
+              ? (d) => {
+                  this._ensureNative();
+                  return this._compiled.validateJSON(JSON.stringify(d));
+                }
+              : (d) => {
+                  this._ensureNative();
+                  return this._compiled.validate(d);
+                });
 
       // Best path: combined validator (single pass, validates + collects errors)
       // Valid data: returns VALID_RESULT, no allocation
@@ -1242,6 +1256,12 @@ Validator.bundleStandalone = function (schemas, opts) {
         .map(({ name, fn }) => `var ${name}=${fn.toString()};`)
         .join('\n');
     }
+    // Include hoisted anyOf/oneOf branch helpers (e.g. `_af1_b0`) so the
+    // bundle output is self-contained. `toStandalone` emits this same source
+    // for single-schema standalone output.
+    if (jsFn._preambleSource) {
+      preamble = preamble ? `${preamble}\n${jsFn._preambleSource}` : jsFn._preambleSource;
+    }
     if (opts && opts.verbose) {
       // Embed the schema and a small resolver so errors carry parentSchema.
       const schemaLit = JSON.stringify(typeof schema === 'string' ? JSON.parse(schema) : schema);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ata-validator",
-  "version": "0.13.1",
+  "version": "0.13.3",
   "description": "Ultra-fast JSON Schema validator. 5x faster validation, 159,000x faster compilation. Works without native addon. Cross-schema $ref, Draft 2020-12 + Draft 7, V8-optimized JS codegen, simdjson, RE2, multi-core. Standard Schema V1 compatible.",
   "main": "index.js",
   "module": "index.mjs",
@@ -40,7 +40,7 @@
     "rebuild": "cmake-js rebuild --target ata",
     "prebuild": "pkg-prebuilds-copy --baseDir build/Release --source ata.node --name=ata --strip --napi_version=10",
     "prebuild-all": "npm run prebuild -- --arch x64 && npm run prebuild -- --arch arm64",
-    "test": "node test.js && node tests/test_aot_build.js && node tests/test_aot_differential.js && node tests/test_aot_cli_build.js && node tests/test_aot_cli_smoke.js",
+    "test": "node test.js && node tests/test_no_native.js && node tests/test_aot_build.js && node tests/test_aot_differential.js && node tests/test_aot_cli_build.js && node tests/test_aot_cli_smoke.js && node tests/test_bundle_standalone.js",
     "test:suite": "node tests/run_suite.js",
     "test:compat": "node tests/test_compat.js",
     "test:standard-schema": "node tests/test_standard_schema.js",