ata-validator 1.16.0 → 1.16.2

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes to ata-validator are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/), and this project adheres to semantic versioning.
 
+## 1.16.2 - 2026-09-12
+
+### Fixed
+
+- A schema with `unevaluatedProperties` or `unevaluatedItems` reported every failure as one placeholder error, `{ code: 'unevaluated', message: 'unevaluated property or item' }`, with no `keyword` and no `instancePath`. The generated code answers the verdict for these schemas but the error generator declines them, and the error path then fell into a stub instead of the interpreted engine, which reports them correctly. A wrong type, a missing required property, a bad format or an enum miss under a root `unevaluatedProperties: false` all came back as that one line, so anything mapping errors by keyword and path saw nothing useful. Failing data is now re-validated by the interpreted engine on that path, as it already was without the native addon for other declined shapes. Verdicts were never affected. Found by a user comparing error output on a generated config schema. `tests/test_unevaluated_error_path.js` holds the generated-code path to the interpreter's errors on five shapes, in all three engine modes.
+
+## 1.16.1 - 2026-09-12
+
+### Fixed
+
+- A custom format (`formats: { name: fn }`, or `addFormat` on the compat class) next to a shape the combined code generator declines, such as an `anyOf` sibling, threw `_uf_<name> is not defined` on the first invalid document instead of reporting the format error. The error-path code generator emitted the call to the format checker without binding it; it now takes the checkers as bound parameters like the other two entry points. Verdicts were never affected, only the error path, and only on that combination. Present since custom formats were added; caught by the 1.16.0 clean-install check. `tests/test_user_format_error_path.js` covers it.
+
 ## 1.16.0 - 2026-09-12
 
 ### Added

package/index.js

@@ -1057,12 +1057,14 @@ class Validator {
           }]
         };
       };
+      // The error generator declines unevaluated*; the interpreted engine
+      // reports those schemas correctly, so failing data is re-validated
+      // there. This used to be a placeholder error with no keyword and no
+      // path, which hid whatever had actually failed.
       const errFn =
         safeErrFn ||
-        (hasUnevaluated
-          ? (d) => ({ valid: jsFn(d), errors: jsFn(d) ? [] : [{ code: 'unevaluated', path: '', message: 'unevaluated property or item' }] })
-          : !native
-            ? jsOnlyFallback
+        (hasUnevaluated || !native
+          ? jsOnlyFallback
             : hasDynRef
               ? (d) => {
                   this._ensureNative();

package/lib/js-compiler.js

@@ -3194,6 +3194,9 @@ function compileToJSCodegenWithErrors(schema, schemaMap, userFormats, sourceOpts
   if (needsBaseTracking(schema, schemaMap, new Set())) return null
 
   const ctx = { varCounter: 0, helperCode: [], rootDefs: eRootDefs, refStack: new Set(), schemaMap: schemaMap || null, anchors: eAnchors, rootSchema: schema, userFormats: userFormats || null,
+                // Custom format checkers referenced by the body, bound as
+                // closure parameters below the way the other entry points do.
+                closureVars: [], closureVals: [],
                 sourceMap: (sourceOpts && sourceOpts.sourceMap && sourceOpts.schemaFile)
                   ? { file: sourceOpts.schemaFile, map: sourceOpts.sourceMap }
                   : null }
@@ -3241,16 +3244,35 @@ function compileToJSCodegenWithErrors(schema, schemaMap, userFormats, sourceOpts
   }
   try {
     let fn
+    // Custom format checkers come in as leading parameters, bound once here,
+    // so the body's `_uf_<name>(...)` calls resolve. Without a binding the
+    // first invalid document threw a ReferenceError instead of reporting.
+    const cvars = ctx.closureVars
+    const cvals = ctx.closureVals
     if (ctx.usesSafeRe) {
       // Inlined helperCode references __ataSafeRe; bind the safe-regex factory.
       // Standalone keeps the inline _errSource — the embed defines __ataSafeRe.
-      const built = new Function('__ataSafeRe', 'd', '_all', body)
-      fn = (d, _all) => built(compileSafe, d, _all)
+      const built = new Function(...cvars, '__ataSafeRe', 'd', '_all', body)
+      fn = cvars.length
+        ? (d, _all) => built(...cvals, compileSafe, d, _all)
+        : (d, _all) => built(compileSafe, d, _all)
+    } else if (cvars.length) {
+      const built = new Function(...cvars, 'd', '_all', body)
+      fn = (d, _all) => built(...cvals, d, _all)
     } else {
       fn = new Function('d', '_all', body)
     }
     fn._errSource = body
     fn._usesSafeRe = !!ctx.usesSafeRe
+    if (cvars.length) {
+      fn._formatClosures = cvars.map((name, i) => {
+        let format = null
+        for (const key of Object.keys(ctx.userFormats)) {
+          if (ctx.userFormats[key] === cvals[i]) { format = key; break }
+        }
+        return { name, fn: cvals[i], format }
+      })
+    }
     return fn
   } catch {
     return null
@@ -3538,11 +3560,16 @@ function genCodeE(schema, v, pathExpr, lines, ctx, schemaPrefix) {
       const fmtCode = fc(v, isStr, ctx).replace(/return false/g, `{${failPush};break _fmt${ri}}`)
       lines.push(`_fmt${ri}:{${fmtCode}}`)
     } else if (ctx.userFormats && typeof ctx.userFormats[schema.format] === 'function') {
-      // User-supplied format checker on the error path. Same closure plumbing
-      // as the boolean codegen — but error codegen has no closure factory, so
-      // bundle output serializes the function via Function#toString separately.
+      // User-supplied format checker on the error path: the same closure
+      // plumbing as the boolean codegen. The function is bound as a parameter
+      // of the compiled error function; bundle output serializes it via
+      // Function#toString separately.
       const safeName = schema.format.replace(/[^a-zA-Z0-9_]/g, '_')
       const closureName = `_uf_${safeName}`
+      if (ctx.closureVars && !ctx.closureVars.includes(closureName)) {
+        ctx.closureVars.push(closureName)
+        ctx.closureVals.push(ctx.userFormats[schema.format])
+      }
       const guard = isStr ? '' : `typeof ${v}==='string'&&`
       lines.push(`if(${guard}!${closureName}(${v})){${failPush}}`)
     }

package/lib/version.js

@@ -7,4 +7,4 @@
 //
 // Kept in lockstep with package.json by `tests/test_version_sync.js`.
 
-module.exports = '1.16.0';
+module.exports = '1.16.2';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ata-validator",
-  "version": "1.16.0",
+  "version": "1.16.2",
   "description": "JSON Schema validation with first-class TypeScript and zero runtime cost. AOT compile to per-schema ESM modules with zero validator dependency. Generic Validator<T> for TypeBox/Zod/Valibot composition. Optional runtime API. Standard Schema V1 compatible.",
   "main": "index.js",
   "module": "index.mjs",
@@ -51,7 +51,7 @@
     "release:check": "node scripts/regen-safe-regex-source.js && node tests/test_pack_purity.js && node scripts/check-doc-coverage.js && node tests/test_error_codes_lock.js && node tests/test_safe_regex_source_sync.js && node tests/test_version_sync.js",
     "build": "cmake-js build --target ata",
     "rebuild": "cmake-js rebuild --target ata",
-    "test": "node test.js && node tests/test_removed_aot_methods.js && node tests/test_no_native.js && node tests/test_no_eval.js && node tests/test_property_dependencies.js && node tests/test_v1_dialect.js && node tests/test_buffer_path_parity.js && node tests/test_buffer_gate.js && node tests/test_buffer_reject_cost.js && node tests/test_nan_verdict.js && node tests/test_remove_additional_nested.js && node tests/test_aot_parse.js && node tests/test_draft7_semantics.js && node tests/test_metaschema_ref.js && node tests/test_pure_js_unsupported.js && node tests/test_native_load_order.js && node tests/test_pack_purity.js && node tests/test_make_native_package.js && node tests/test_browser_nofs.js && node tests/test_browser_imports_guard.js && node tests/test_version_sync.js && node tests/test_native_loaded.js && node tests/test_safe_regex_source_sync.js && node tests/test_t_builder.js && node tests/test_async_refine.js && node tests/test_safe_regex.js && node tests/test_safe_regex_integration.js && node tests/test_aot_build.js && node tests/test_aot_differential.js && node tests/test_aot_cli_build.js && node tests/test_aot_cli_smoke.js && node tests/test_bundle_standalone.js && node tests/test_standalone_anyof.js && node tests/test_standalone_formats.js && node tests/test_aot_format_mode.js && node tests/test_aot_additional_props_errors.js && node tests/test_id_anchor_refs.js && node tests/test_engine_routing.js && node tests/test_engine_diagnostic.js && node tests/test_format_engine_parity.js && node tests/test_formats_single_pass.js && node tests/test_format_single_error.js && node tests/test_defs_pointer_alias.js && node tests/test_cross_doc_root_ref.js && node tests/test_codegen_entrypoint_agreement.js && node tests/test_hybrid_agreement.js && node tests/test_codegen_edge_shapes.js && node tests/test_ajv_errors.js && node tests/test_custom_keywords.js && node tests/test_ajv_parity.js && node tests/test_pattern_properties_errors.js && node tests/test_no_input_mutation.js && node tests/test_typed_validator_runner.js && node tests/test_define_schema.js && node tests/test_error_codes_lock.js && node tests/test_error_code_lookup.js && node tests/test_error_order.js && node tests/test_value_equality.js && node tests/test_vocabulary.js && node tests/test_schema_scan.js && node tests/test_lazy_errors.js && node tests/test_lazy_instance.js && node tests/test_cyclic_input.js && node tests/test_native_error_codes.js && node tests/test_verdict_preprocess.js && node tests/test_plan_compiler.js && node tests/test_nullable.js && node tests/test_validate_and_parse.js && node tests/test_validate_data.js && node tests/test_enrich_error.js && node tests/test_enrich_received.js && node tests/test_rich_errors_optout.js && node tests/test_error_messages.js && node tests/test_source_positions.js && node tests/fuzz_positions.js && node tests/test_data_positions.js && node tests/test_render_shared.js && node tests/test_renderers.js && node tests/test_additive_fields.js && node tests/test_diagnostic_source.js && node tests/test_diagnose.js && node tests/test_correlate.js && node tests/test_diagnostics_score.js && node tests/test_runtime_error_dx.js && node tests/test_aot_error_dx.js && node tests/test_abort_early.js && node tests/test_branch_collapse.js && node tests/test_suggestions.js && node tests/test_cli_validate.js && node tests/test_cli_version.js && node benchmark/bench_aot_size.mjs",
+    "test": "node test.js && node tests/test_removed_aot_methods.js && node tests/test_no_native.js && node tests/test_no_eval.js && node tests/test_property_dependencies.js && node tests/test_v1_dialect.js && node tests/test_buffer_path_parity.js && node tests/test_buffer_gate.js && node tests/test_buffer_reject_cost.js && node tests/test_nan_verdict.js && node tests/test_remove_additional_nested.js && node tests/test_aot_parse.js && node tests/test_draft7_semantics.js && node tests/test_metaschema_ref.js && node tests/test_pure_js_unsupported.js && node tests/test_native_load_order.js && node tests/test_pack_purity.js && node tests/test_make_native_package.js && node tests/test_browser_nofs.js && node tests/test_browser_imports_guard.js && node tests/test_version_sync.js && node tests/test_native_loaded.js && node tests/test_safe_regex_source_sync.js && node tests/test_t_builder.js && node tests/test_async_refine.js && node tests/test_safe_regex.js && node tests/test_safe_regex_integration.js && node tests/test_aot_build.js && node tests/test_aot_differential.js && node tests/test_aot_cli_build.js && node tests/test_aot_cli_smoke.js && node tests/test_bundle_standalone.js && node tests/test_standalone_anyof.js && node tests/test_standalone_formats.js && node tests/test_aot_format_mode.js && node tests/test_aot_additional_props_errors.js && node tests/test_id_anchor_refs.js && node tests/test_engine_routing.js && node tests/test_engine_diagnostic.js && node tests/test_format_engine_parity.js && node tests/test_formats_single_pass.js && node tests/test_format_single_error.js && node tests/test_defs_pointer_alias.js && node tests/test_cross_doc_root_ref.js && node tests/test_codegen_entrypoint_agreement.js && node tests/test_hybrid_agreement.js && node tests/test_codegen_edge_shapes.js && node tests/test_ajv_errors.js && node tests/test_custom_keywords.js && node tests/test_ajv_parity.js && node tests/test_user_format_error_path.js && node tests/test_unevaluated_error_path.js && node tests/test_pattern_properties_errors.js && node tests/test_no_input_mutation.js && node tests/test_typed_validator_runner.js && node tests/test_define_schema.js && node tests/test_error_codes_lock.js && node tests/test_error_code_lookup.js && node tests/test_error_order.js && node tests/test_value_equality.js && node tests/test_vocabulary.js && node tests/test_schema_scan.js && node tests/test_lazy_errors.js && node tests/test_lazy_instance.js && node tests/test_cyclic_input.js && node tests/test_native_error_codes.js && node tests/test_verdict_preprocess.js && node tests/test_plan_compiler.js && node tests/test_nullable.js && node tests/test_validate_and_parse.js && node tests/test_validate_data.js && node tests/test_enrich_error.js && node tests/test_enrich_received.js && node tests/test_rich_errors_optout.js && node tests/test_error_messages.js && node tests/test_source_positions.js && node tests/fuzz_positions.js && node tests/test_data_positions.js && node tests/test_render_shared.js && node tests/test_renderers.js && node tests/test_additive_fields.js && node tests/test_diagnostic_source.js && node tests/test_diagnose.js && node tests/test_correlate.js && node tests/test_diagnostics_score.js && node tests/test_runtime_error_dx.js && node tests/test_aot_error_dx.js && node tests/test_abort_early.js && node tests/test_branch_collapse.js && node tests/test_suggestions.js && node tests/test_cli_validate.js && node tests/test_cli_version.js && node benchmark/bench_aot_size.mjs",
     "bench:size": "node benchmark/bench_aot_size.mjs",
     "test:suite": "node tests/run_suite.js && node tests/run_suite.js draft7 && node tests/run_suite.js v1",
     "test:compat": "node tests/test_compat.js",
@@ -122,13 +122,13 @@
     "LICENSE"
   ],
   "optionalDependencies": {
-    "@ata-validator/native-darwin-arm64": "1.16.0",
-    "@ata-validator/native-darwin-x64": "1.16.0",
-    "@ata-validator/native-linux-arm64-gnu": "1.16.0",
-    "@ata-validator/native-linux-arm64-musl": "1.16.0",
-    "@ata-validator/native-linux-x64-gnu": "1.16.0",
-    "@ata-validator/native-linux-x64-musl": "1.16.0",
-    "@ata-validator/native-win32-x64": "1.16.0"
+    "@ata-validator/native-darwin-arm64": "1.16.2",
+    "@ata-validator/native-darwin-x64": "1.16.2",
+    "@ata-validator/native-linux-arm64-gnu": "1.16.2",
+    "@ata-validator/native-linux-arm64-musl": "1.16.2",
+    "@ata-validator/native-linux-x64-gnu": "1.16.2",
+    "@ata-validator/native-linux-x64-musl": "1.16.2",
+    "@ata-validator/native-win32-x64": "1.16.2"
   },
   "peerDependencies": {
     "yaml": "^2.0.0"