ata-validator 1.22.0 → 1.22.1

package/CHANGELOG.md

@@ -2,6 +2,24 @@
 
 All notable changes to ata-validator are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/), and this project adheres to semantic versioning.
 
+## 1.22.1 - 2026-09-16
+
+### Fixed
+
+- `validateJSON()` did not return on a document that ends inside an array. `validateJSON('[')` was one byte, any schema, the default configuration, and it never came back. On a rejection the error carries a caret, so a map from pointer to position is built from the raw text; its array loop asked for the next element without checking that the input had ended, `walk` returned without moving, and nothing else could close the array. `'[}'` hung the same way, because a character that begins no value leaves the position where it was. The object loop escaped only by accident: an unterminated string throws, and `lib/data-position-cache.js` catches throws. It cannot catch a loop. Both container loops now stop at the end of the input, and the array loop stops when an iteration does not advance, so a truncated document still yields a map of what was there.
+  - A regression here is an infinite loop, which an ordinary test cannot report because it never reaches a failure. `tests/test_malformed_json_termination.js` runs its corpus in a child process under a watchdog, so a hang becomes a timeout and a red test. The corpus is every prefix of ten documents plus characters inserted where they cannot begin a value: 1793 inputs, 7172 verdicts. It was confirmed to fail before this change and pass after.
+  - `tests/fuzz_positions.js` had never fed malformed text to this walker; it fuzzes schema positions with `JSON.stringify` output, which is always well formed. Nothing else changes: on the same five-field schema, `validate()` on a valid document, `validate()` on an invalid one with the errors read, and `validateJSON()` on both are all within measurement noise of 1.22.0.
+
+- `unevaluatedProperties: false` reported the boolean schema underneath the keyword instead of the keyword itself: `keyword: 'not'`, empty `params`, and an `instancePath` pointing at the offending member rather than the object holding it. Nothing in that error said which key was unexpected, so a caller branching on `params.unevaluatedProperty` to flag unknown keys saw nothing at all. It now reports `unevaluatedProperties` on the object, with `params.unevaluatedProperty` naming the key, one error per key. `unevaluatedItems: false` had the same shape and now reports one error for the array, with `params.limit` at the first unevaluated position. Both engines were changed together and `tests/test_unevaluated_error_shape.js` holds them to it. Reported by a config linter reading `err.params.unevaluatedProperty` through `ata-validator/compat`.
+- `verbose: true` attached only `parentSchema`. It now also attaches `data`, the value the error points at, and `schema`, the failing keyword's own value, which is the whole set the option is supposed to carry. Without `data` a caller had to walk the document by the instance path itself. The default error shape is unchanged: the two fields appear only when `verbose` is on, including on the errors `ata-validator/compat` synthesises for an `if` wrapper.
+
+### Changed
+
+- `additionalProperties: false` no longer compiles to a comparison per declared name. It was one comparison per name per key of the document, which is quadratic in the number of properties: a 1000-property schema spent 75 µs on a document where the same schema without the keyword took 3, and doubling the properties quadrupled that. Above 128 declared names the generated code now reads a name lookup built once per compiled function; below that the comparison chain stays, because it allocates nothing and the two are the same within noise there.
+  - Cross-process medians, one variant per process, properties of type string: 250 names 8.76 µs to 5.49, 500 names 26.29 to 12.47. With no per-property work, so the membership test is all that is measured: 1000 names 77.3 µs to 18.1, 2000 names 273.6 to 38.9.
+  - Measured and not taken: `for...in` over the document instead of an indexed loop over `Object.keys` was about a quarter slower at every size, even though it allocates no key array.
+  - `tests/test_additional_properties_scaling.js` guards this structurally, on the emitted source: the lookup is present above the threshold, absent below it, and declared outside the function that runs per call. It asserts no timing, because a wall-clock ratio was not a guard here: the quadratic shape measured 7.7x for four times the properties on the machine the test was written on, where a CI runner measured 8.3x for the fixed code. The comparison chain short-circuits as soon as a key matches, so the ratio never separated the two. Found by a config linter whose schema is generated from a project's environment variables, so its property count is whatever the project has.
+
 ## 1.22.0 - 2026-09-14
 
 ### Fixed

package/README.md

@@ -1,6 +1,6 @@
 # ata-validator
 
-JSON Schema validation with first-class TypeScript and zero runtime cost. AOT compile your schemas to per-schema ESM modules with no validator dependency. `Validator<T>` composes with TypeBox, Zod-from-JSON-Schema, Valibot, or hand-written types. Runtime API available for dynamic schemas. Draft 2020-12, draft 7 and the [JSON Schema v1 dialect](#dialects).
+JSON Schema validation that compiles for speed and still runs where code generation is blocked. The compiled and interpreted engines answer identically, at 100% of the official suite in both modes, across Draft 2020-12, draft 7 and the [JSON Schema v1 dialect](#dialects). First-class TypeScript inference, and `ata build` emits a standalone module that imports nothing.
 
 [![npm](https://img.shields.io/npm/v/ata-validator)](https://www.npmjs.com/package/ata-validator)
 [![License](https://img.shields.io/npm/l/ata-validator)](LICENSE)
@@ -97,6 +97,55 @@ run on the interpreted engine. That engine compiles each schema into a tree of c
 on a six-field object schema a passing payload costs about 136 ns against 8 ns for the same
 shape on the compiled path, both measured warm in one run on the same machine.
 
+## Schemas and models
+
+If you ask a model for structured output and validate the result, the schema is
+part of the prompt and the validation error is part of the retry. Two functions
+produce those strings.
+
+```js
+import { describeSchema, toRetryMessage, Validator } from 'ata-validator'
+
+describeSchema(schema)
+// output: object
+//   status: one of "AWAITING_CLEARANCE", "PART_SETTLED", "CLOSED_OUT"
+//   region_code: one of "R11", "R24", "R37", "R52"
+//   amount: integer, at least 1
+//   no other fields
+
+const r = new Validator(schema).validate(fromTheModel)
+if (!r.valid) toRetryMessage(r.errors)
+// /status: expected one of ["AWAITING_CLEARANCE", "PART_SETTLED", "CLOSED_OUT"], found "partial"
+// /region_code: expected one of ["R11", "R24", "R37", "R52"], found "HH"
+// /amount: expected ≥1, found 0
+// /: unknown property "extra"
+```
+
+Whether this is worth anything depends on the schema, and the measurement that
+says so is
+[public](https://github.com/mertcanaltin/retry-message-experiment), with the
+harness and the raw results.
+
+On constraints a model can work out from the document, a pattern, a date format,
+a currency in uppercase, it changes nothing: 40 of 40 documents recovered on one
+retry with the conventional error text, and 40 of 40 with the detailed one.
+
+On constraints it cannot work out, an `enum` of internal codes while the
+document says "paid in part" and "Hamburg office", the conventional text
+recovered 0 of 30 and the detailed text 30 of 30. The model does not give up
+when it is not told the values, it invents plausible ones, so no number of
+retries closes it.
+
+Stating the constraints up front does the same job earlier. Across four prompts
+on the same fixtures, first attempts that validate: nothing 0 of 30, a lean
+field list 0 of 30, a careful hand-written description 30 of 30 on the inferable
+fixture and 0 of 30 on the opaque one, and `describeSchema` 30 and 23. A person
+writing prose matches the generated description wherever prose works. It is the
+enumerated values a person leaves out.
+
+One model, Claude Haiku 4.5, one schema shape, 30 to 40 documents per arm, no
+temperature control. Read it as a finding, not a law.
+
 ## Error messages
 
 ata's error output is compiler-grade: each error carries a stable code, an inline source frame pointing at the schema file, and another pointing at the offending bytes in the request payload. Renderers ship in three styles:
@@ -153,6 +202,33 @@ Schemas without an `errorMessage` keyword pay nothing: the override pass is only
 
 For consumers who built log dashboards on the v0.14 error shape, `new Validator(schema, { richErrors: false })` returns the legacy shape exactly. For high-throughput paths, `abortEarly: true` continues to short-circuit; the returned error carries `code: 'ATA9000'` and no enrichment.
 
+## Which path, and where
+
+There are two ways to run ata and they suit different places. Measuring the wrong one
+is the most common way to get a misleading number out of this library.
+
+| | compiled with `ata build` | runtime `new Validator(schema)` |
+|---|---|---|
+| In a bundle, gzipped | **1.9 KB** | 75.6 KB |
+| Time to a served request | **3.5 ms** | 10.7 ms |
+| Schema known when | build time | any time |
+
+The bundle row is a ten-field user schema built with
+`bun build --minify --target=browser`. The startup row is a Hono route on Bun 1.4, best
+of seven, against 3.6 ms for the same app doing no validation at all, so the compiled
+path costs nothing measurable to start. The runtime
+figure is what it is because a schema that arrives at run time can use any keyword, so
+the whole engine has to be there. The compiled module imports nothing and contains only
+the checks your schema asks for.
+
+**On a server, use whichever fits your schemas.** 76 KB of JavaScript on a Node or Bun
+process is not a cost anyone notices, and the runtime API is the simpler thing to reach
+for. Speed is the same either way once warm.
+
+**In a browser, on an edge runtime, or anywhere cold starts are charged, compile.** This
+is where the difference is the whole story, and it is also where `new Function` is often
+blocked outright, which the compiled module does not need.
+
 ## When to use the runtime API instead
 
 `ata build` is for schemas you know at build time. If your schemas are user-supplied at runtime (form builders, no-code platforms, dynamic API ingestion), use the runtime API:
@@ -374,7 +450,7 @@ const v = new Validator(schema, {
 
 ### Build-time compile (`ata compile`)
 
-The `ata` CLI turns a JSON Schema file into a self-contained JavaScript module. No runtime dependency on `ata-validator`, so only the generated validator ships to the browser. Typical output is ~1 KB gzipped compared to ~65 KB for the full runtime bundled for the browser.
+The `ata` CLI turns a JSON Schema file into a self-contained JavaScript module. No runtime dependency on `ata-validator`, so only the generated validator ships to the browser. Typical output is about 2 KB gzipped for a ten-field schema, against 74 KB for the runtime bundled for the browser.
 
 ```bash
 npx ata compile schemas/user.json -o src/generated/user.validator.mjs
@@ -404,7 +480,7 @@ CLI options:
 | `-o, --output <file>` | `<schema>.validator.mjs` | Output path |
 | `-f, --format <fmt>` | `esm` | `esm` or `cjs` |
 | `--name <TypeName>` | from filename | Root type name in the `.d.ts` |
-| `--abort-early` | off | Generate the stub-error variant (~0.5 KB gzipped) |
+| `--abort-early` | off | Generate the stub-error variant, about a third of the source |
 | `--no-types` | off | Skip the `.d.mts` / `.d.cts` output |
 
 For a project with many schemas, `ata build <glob>` compiles them all in one command:
@@ -415,13 +491,19 @@ npx ata build 'schemas/*.json' --out-dir build/validators --check
 
 Run with `--watch` during development for incremental rebuilds.
 
-Typical bundle sizes (10-field user schema, gzipped):
+Bundle sizes for a 10-field user schema, minified and gzipped, measured with
+`bun build --minify --target=browser`:
 
-| Variant | Size | Notes |
+| What the app imports | Size | Notes |
 |---|---|---|
-| `ata-validator` runtime | ~27 KB | Full compiler + all keywords |
-| `ata compile` (standard) | **~1.1 KB** | Validator + detailed error collector |
-| `ata compile --abort-early` | **~0.5 KB** | Validator + stub errors only |
+| `Validator` from `ata-validator` | 74.1 KB | The compiler ships with it, because a runtime schema can use any keyword |
+| `isValid` from the compiled module | **1.9 KB** | Nothing else is reachable, so the error collector is dropped |
+| `validate` from the compiled module | **3.6 KB** | Adds the detailed error collector |
+
+`--abort-early` makes the generated source about three times smaller, and after
+bundling it makes no difference: importing only `isValid` already leaves the error
+collector unreachable, and a bundler drops it. Use the flag to cut the file on disk,
+not to cut what ships.
 
 Programmatic API if you prefer to script it:
 

package/compat.js

@@ -1,5 +1,7 @@
 'use strict';
 
+const { resolvePointer } = require('./lib/pointer.js');
+
 // Drop-in for the default validator's class. `const Ajv = require('ata-validator/compat')`
 // and the rest of the file stays as it was: `new Ajv(opts)`, `compile`,
 // `validate`, `addSchema`, `getSchema`, `removeSchema`, `addFormat`,
@@ -174,7 +176,16 @@ class Ata {
         validate.errors = null;
         return true;
       }
-      const errors = shaper === null ? result.errors : shaper(result.errors, data);
+      let errors = shaper === null ? result.errors : shaper(result.errors, data);
+      // Errors the shaper synthesises, the `if` wrapper among them, are built
+      // from the group rather than carried up from the validator, so verbose
+      // mode has to fill in the value they point at here or they would be the
+      // only ones missing it.
+      if (this.opts.verbose) {
+        errors = errors.map((e) => (e && !('data' in e)
+          ? { ...e, data: resolvePointer(data, e.instancePath || '', undefined) }
+          : e));
+      }
       validate.errors = shaper === null && !allErrors ? errors.slice(0, 1) : errors;
       return false;
     };

package/index.d.ts

@@ -72,6 +72,37 @@ export function renderPretty(errors: RichValidationError[], opts?: PrettyOptions
 export function renderCompact(errors: RichValidationError[], opts?: CompactOptions): string;
 export function renderJSON(errors: RichValidationError[], opts?: JSONRenderOptions): string;
 
+/** Options for {@link describeSchema}. */
+export interface DescribeSchemaOptions {
+  /** What to call the top level in the description. Defaults to `output`. */
+  name?: string;
+}
+
+/**
+ * The schema's constraints as prose, for the prompt that asks a model to
+ * produce a document. Values a model cannot infer, an `enum` of internal codes
+ * most of all, are the ones worth stating: measured on one fixture, naming them
+ * took first-attempt validity from 0 of 30 to 23 of 30, where a careful
+ * hand-written description scored 0 on exactly those fields.
+ * https://github.com/mertcanaltin/retry-message-experiment
+ */
+export function describeSchema(schema: object, opts?: DescribeSchemaOptions): string;
+
+/** Options for {@link toRetryMessage}. */
+export interface RetryMessageOptions {
+  /** Most errors to include. Defaults to 20, because a model does not act on a long list. */
+  limit?: number;
+}
+
+/**
+ * The errors as a string to send back to a model, naming what was expected and
+ * what arrived. On constraints a model can infer from context this changes
+ * nothing; where a constraint is an internal vocabulary it was the difference
+ * between 0 of 30 and 30 of 30 recovered on one retry.
+ * https://github.com/mertcanaltin/retry-message-experiment
+ */
+export function toRetryMessage(errors: RichValidationError[], opts?: RetryMessageOptions): string;
+
 /** A user-supplied format checker. Receives the candidate value, returns true if valid. */
 export type FormatChecker = (value: string) => boolean;
 

package/index.js

@@ -1233,19 +1233,36 @@ class Validator {
               }
             : (data) => (jsFn(data) ? VALID_RESULT : errFn(data));
       }
-      // Verbose mode: populate parentSchema on each error.
-      // Errors may be frozen, so clone them with the extra field.
+      // Verbose mode: populate parentSchema, schema and data on each error, the
+      // three fields the default error shape carries under the same option.
+      // `data` is the value the error points at; without it a caller has to
+      // walk the document by the instance path itself, which is what one
+      // migration ended up writing by hand. Errors may be frozen, so clone
+      // them with the extra fields.
       if (this._verbose) {
         const inner = this.validate;
         const root = this._schemaObj;
+        const { resolvePointer } = require('./lib/pointer.js');
         this.validate = (data) => {
           const result = inner(data);
           if (result && !result.valid && result.errors) {
-            const enriched = result.errors.map((err) =>
-              err && err.parentSchema === undefined
-                ? { ...err, parentSchema: resolveSchemaByPath(root, err.schemaPath) }
-                : err
-            );
+            const enriched = result.errors.map((err) => {
+              if (!err || err.parentSchema !== undefined) return err;
+              const parentSchema = resolveSchemaByPath(root, err.schemaPath);
+              // The last segment of the schema path is the keyword that
+              // failed, so its value on the parent is that keyword's schema.
+              const sp = typeof err.schemaPath === 'string' ? err.schemaPath : '';
+              const last = sp.slice(sp.lastIndexOf('/') + 1).replace(/~1/g, '/').replace(/~0/g, '~');
+              const keywordSchema = (parentSchema !== null && typeof parentSchema === 'object' && last)
+                ? parentSchema[last]
+                : undefined;
+              return {
+                ...err,
+                parentSchema,
+                schema: keywordSchema,
+                data: resolvePointer(data, err.instancePath, undefined),
+              };
+            });
             return { valid: false, errors: enriched };
           }
           return result;

package/lib/data-positions.js

@@ -63,6 +63,10 @@ function buildDataPositionMap (input) {
       i++;
       while (true) {
         skipWs();
+        // The input is not required to be valid JSON: this map is built to
+        // put a caret on a syntax error, so a document that stops in the
+        // middle of a container is the normal case, not an impossible one.
+        if (i >= n) break;
         if (text.charCodeAt(i) === 0x7d) { i++; break; }
         if (text.charCodeAt(i) === 0x2c) { i++; continue; }
         skipWs();
@@ -88,9 +92,15 @@ function buildDataPositionMap (input) {
       let idx = 0;
       while (true) {
         skipWs();
+        if (i >= n) break;
         if (text.charCodeAt(i) === 0x5d) { i++; break; }
         if (text.charCodeAt(i) === 0x2c) { i++; continue; }
+        const before = i;
         walk(path.concat([String(idx)]));
+        // A character that begins no value at all, a stray `}` for instance,
+        // leaves the position where it was, and a loop that does not advance
+        // does not end. `validateJSON('[')` hung here on one byte.
+        if (i === before) break;
         idx++;
       }
     } else if (ch === 0x22) {

package/lib/enrich-error.js

@@ -219,6 +219,12 @@ function enrich (rawErr, opts) {
     parentSchema: rawErr.parentSchema,
   };
 
+  // Verbose mode's two other fields. Carried only when the raw error has them,
+  // so the default error shape does not grow two undefined keys for everyone
+  // who never asked for verbose.
+  if ('data' in rawErr) out.data = rawErr.data;
+  if ('schema' in rawErr) out.schema = rawErr.schema;
+
   // oneOf/anyOf collapse: preserve the nested branch errors so the pretty
   // renderer can surface the closest variant's diagnostics.
   if (rawErr.branchErrors) out.branchErrors = rawErr.branchErrors;

package/lib/interpreter.js

@@ -461,6 +461,11 @@ class Plan {
 
     this.unevaluatedProperties = schema.unevaluatedProperties !== undefined ? child(schema.unevaluatedProperties) : undefined;
     this.unevaluatedItems = schema.unevaluatedItems !== undefined ? child(schema.unevaluatedItems) : undefined;
+    // A `false` here rejects the member outright, and the error belongs to this
+    // keyword on this object, not to a boolean schema that happens to sit
+    // under it. Recorded at compile time so the check below is one test.
+    this.unevaluatedPropertiesFalse = schema.unevaluatedProperties === false;
+    this.unevaluatedItemsFalse = schema.unevaluatedItems === false;
     this.hasUnevaluated = this.unevaluatedProperties !== undefined || this.unevaluatedItems !== undefined;
 
     // Custom keywords present on this node, in schema order. Each op holds
@@ -1183,7 +1188,14 @@ class Interpreter {
       if (P.unevaluatedProperties !== undefined && bits === T_OBJECT) {
         for (const key of Object.keys(data)) {
           if (local.props && local.props.has(key)) continue;
-          if (!this.eval(P.unevaluatedProperties, data[key], base, dynScope, errors, instancePath + '/' + escapePointer(key), schemaPath + '/unevaluatedProperties', stack, DISCARD)) valid = false;
+          if (P.unevaluatedPropertiesFalse) {
+            // The name is what is wrong, so the error names it and sits on the
+            // object holding it. Descending instead reported a false boolean
+            // schema at the member's own path, which says nothing about which
+            // key was unexpected and left `params` empty.
+            valid = false;
+            if (errors !== NOERRORS) errors.push(err('unevaluatedProperties', 'unevaluatedProperties', instancePath, schemaPath + '/unevaluatedProperties', { unevaluatedProperty: key }, 'must NOT have unevaluated properties'));
+          } else if (!this.eval(P.unevaluatedProperties, data[key], base, dynScope, errors, instancePath + '/' + escapePointer(key), schemaPath + '/unevaluatedProperties', stack, DISCARD)) valid = false;
           if (!local.props) local.props = new Set();
           local.props.add(key);
         }
@@ -1191,6 +1203,13 @@ class Interpreter {
       if (P.unevaluatedItems !== undefined && bits === T_ARRAY) {
         for (let i = 0; i < data.length; i++) {
           if (local.items && local.items.has(i)) continue;
+          if (P.unevaluatedItemsFalse) {
+            // One error for the array, not one per trailing element: what the
+            // array got wrong is its length past the last evaluated position.
+            valid = false;
+            if (errors !== NOERRORS) errors.push(err('unevaluatedItems', 'unevaluatedItems', instancePath, schemaPath + '/unevaluatedItems', { limit: i }, 'must NOT have more than ' + i + ' items'));
+            break;
+          }
           if (!this.eval(P.unevaluatedItems, data[i], base, dynScope, errors, instancePath + '/' + i, schemaPath + '/unevaluatedItems', stack, DISCARD)) valid = false;
           if (!local.items) local.items = new Set();
           local.items.add(i);

package/lib/js-compiler.js

@@ -35,6 +35,46 @@ function hoistOnce(ctx, key, code) {
   else if (ctx.helperCode) ctx.helperCode.push(code)
 }
 
+// Above this many declared names, asking whether a key is one of them by
+// testing it against each name in turn costs a comparison per name per key,
+// which is quadratic in the number of properties: a 1000-property schema with
+// `additionalProperties: false` spent 75 us where the same schema without the
+// keyword took 3, and doubling the properties quadrupled that. Below this many
+// the two are the same within noise and the chain allocates nothing, so it
+// stays. Cross-process medians, one variant per process, properties of type
+// string: 3 to 100 names are a tie; 250 names 8.76 us against 5.49, 500 26.29
+// against 12.47, and with no per-property work 2000 names 273 against 49.
+const AP_LOOKUP_MIN = 128
+
+// A name set built once per compiled function rather than once per call, as
+// source text so the standalone output carries it the same way. A null
+// prototype means a key called `toString` is not a member by accident, and a
+// plain property read measured faster than `Set#has` at every size tried.
+function emitNameLookup (ctx, names) {
+  const id = `_apn${ctx.varCounter++}`
+  const list = names.map((n) => JSON.stringify(n)).join(',')
+  const decl = `const ${id}=Object.create(null);for(const _apx of [${list}])${id}[_apx]=1`
+  if (ctx.preamble) ctx.preamble.push(decl)
+  else if (ctx.helperCode) ctx.helperCode.push(decl)
+  else return null
+  return id
+}
+
+// "every own key of `v` is one of `names`", as a `return false` check. A
+// hoisted lookup above the crossover, the comparison chain below it.
+function apMembershipCheck (ctx, names, v) {
+  if (names.length >= AP_LOOKUP_MIN) {
+    const id = emitNameLookup(ctx, names)
+    if (id !== null) {
+      // An indexed loop over `Object.keys`, not `for...in`: it allocates the key
+      // array but measured faster at every size tried, by about a quarter.
+      const i = ctx.varCounter++
+      return `var _apk${i}=Object.keys(${v});for(var _api${i}=0;_api${i}<_apk${i}.length;_api${i}++)if(${id}[_apk${i}[_api${i}]]===undefined)return false`
+    }
+  }
+  return `for(var _k in ${v})if(${names.map((k) => `_k!==${JSON.stringify(k)}`).join('&&')})return false`
+}
+
 function emitDeq(ctx) {
   hoistOnce(ctx, '_deqHoisted', DEQ_HELPER)
   return '_deq'
@@ -2147,7 +2187,7 @@ function genCode(schema, v, lines, ctx, knownType) {
       ? (propCount <= 15
           ? `var _n=0;for(var _k in ${v})_n++;if(_n!==${propCount})return false`
           : `if(Object.keys(${v}).length!==${propCount})return false`)
-      : `for(var _k in ${v})if(${Object.keys(schema.properties).map(k => `_k!==${JSON.stringify(k)}`).join('&&')})return false`
+      : apMembershipCheck(ctx, Object.keys(schema.properties), v)
         _deferOrInline(ctx, lines, v, isObj ? inner : `if(typeof ${v}==='object'&&${v}!==null&&!Array.isArray(${v})){${inner}}`)
   }
 

package/lib/plan-compiler.js

@@ -894,6 +894,27 @@ function install(deps) {
     // unevaluated*: run last, against the annotations of everything above.
     if (P.unevaluatedProperties !== undefined) {
       const fn = child(P.unevaluatedProperties);
+      if (fn === FALSE_PAIR) {
+        // `false` rejects the member outright, and what is wrong is the name.
+        // Running the boolean schema against the value instead reported a
+        // false schema at the member's own path with empty params, which does
+        // not say which key was unexpected. The error belongs to this keyword,
+        // on the object holding the key, and it carries the key.
+        steps.push((data, errors, instancePath, schemaPath, stack, rec) => {
+          if (dataBits(data) !== T_OBJECT) return true;
+          let ok = true;
+          const keys = keysOf(rec, data);
+          for (let k = 0; k < keys.length; k++) {
+            const key = keys[k];
+            if (hasProp(rec, key)) continue;
+            ok = false;
+            if (errors === NOERRORS) return false;
+            errors.push(err('unevaluatedProperties', 'unevaluatedProperties', instancePath, schemaPath + '/unevaluatedProperties', { unevaluatedProperty: key }, 'must NOT have unevaluated properties'));
+            addProp(rec, key);
+          }
+          return ok;
+        });
+      } else {
       steps.push((data, errors, instancePath, schemaPath, stack, rec) => {
         if (dataBits(data) !== T_OBJECT) return true;
         let ok = true;
@@ -909,6 +930,7 @@ function install(deps) {
         }
         return ok;
       });
+      }
       if (fn === FALSE_PAIR) {
         // Every key must already be evaluated; on success there is nothing
         // new to record.
@@ -936,6 +958,21 @@ function install(deps) {
     }
     if (P.unevaluatedItems !== undefined) {
       const fn = child(P.unevaluatedItems);
+      if (fn === FALSE_PAIR) {
+        // One error for the array rather than one per trailing element: what
+        // the array got wrong is its length past the last evaluated position.
+        steps.push((data, errors, instancePath, schemaPath, stack, rec) => {
+          if (dataBits(data) !== T_ARRAY) return true;
+          for (let i = 0; i < data.length; i++) {
+            if (hasItem(rec, i)) continue;
+            if (errors !== NOERRORS) errors.push(err('unevaluatedItems', 'unevaluatedItems', instancePath, schemaPath + '/unevaluatedItems', { limit: i }, 'must NOT have more than ' + i + ' items'));
+            if (data.length > rec.n) rec.n = data.length;
+            return false;
+          }
+          if (data.length > rec.n) rec.n = data.length;
+          return true;
+        });
+      } else {
       steps.push((data, errors, instancePath, schemaPath, stack, rec) => {
         if (dataBits(data) !== T_ARRAY) return true;
         let ok = true;
@@ -949,6 +986,7 @@ function install(deps) {
         if (data.length > rec.n) rec.n = data.length;
         return ok;
       });
+      }
       if (fn === FALSE_PAIR) {
         vsteps.push((data, stack, rec) => {
           if (dataBits(data) !== T_ARRAY) return true;

package/lib/version.js

@@ -7,4 +7,4 @@
 //
 // Kept in lockstep with package.json by `tests/test_version_sync.js`.
 
-module.exports = '1.22.0';
+module.exports = '1.22.1';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ata-validator",
-  "version": "1.22.0",
-  "description": "JSON Schema validation with first-class TypeScript and zero runtime cost. AOT compile to per-schema ESM modules with zero validator dependency. Generic Validator<T> for TypeBox/Zod/Valibot composition. Optional runtime API. Standard Schema V1 compatible.",
+  "version": "1.22.1",
+  "description": "JSON Schema validation that compiles for speed and still runs where code generation is blocked. Compiled and interpreted engines answer identically at 100% of the official suite. TypeScript inference, Standard Schema V1, and a build step that emits dependency-free modules.",
   "main": "index.js",
   "module": "index.mjs",
   "types": "index.d.ts",
@@ -51,7 +51,7 @@
     "release:check": "node scripts/regen-safe-regex-source.js && node tests/test_pack_purity.js && node scripts/check-doc-coverage.js && node tests/test_error_codes_lock.js && node tests/test_safe_regex_source_sync.js && node tests/test_version_sync.js",
     "build": "cmake-js build --target ata",
     "rebuild": "cmake-js rebuild --target ata",
-    "test": "node test.js && node tests/test_removed_aot_methods.js && node tests/test_no_native.js && node tests/test_no_eval.js && node tests/test_property_dependencies.js && node tests/test_v1_dialect.js && node tests/test_buffer_path_parity.js && node tests/test_buffer_gate.js && node tests/test_buffer_reject_cost.js && node tests/test_nan_verdict.js && node tests/test_remove_additional_nested.js && node tests/test_exclusive_bounds.js && node tests/test_engine_differential.js && node tests/test_error_shape_differential.js && node tests/test_output_format.js && node tests/test_retry_message.js && node tests/test_describe_schema.js && node tests/test_aot_parse.js && node tests/test_draft7_semantics.js && node tests/test_metaschema_ref.js && node tests/test_pure_js_unsupported.js && node tests/test_native_load_order.js && node tests/test_pack_purity.js && node tests/test_make_native_package.js && node tests/test_browser_nofs.js && node tests/test_browser_imports_guard.js && node tests/test_version_sync.js && node tests/test_native_loaded.js && node tests/test_safe_regex_source_sync.js && node tests/test_t_builder.js && node tests/test_async_refine.js && node tests/test_safe_regex.js && node tests/test_safe_regex_integration.js && node tests/test_aot_build.js && node tests/test_aot_differential.js && node tests/test_aot_cli_build.js && node tests/test_aot_cli_smoke.js && node tests/test_bundle_standalone.js && node tests/test_standalone_anyof.js && node tests/test_standalone_formats.js && node tests/test_aot_format_mode.js && node tests/test_aot_additional_props_errors.js && node tests/test_id_anchor_refs.js && node tests/test_engine_routing.js && node tests/test_compile_cache_order.js && node tests/test_engine_diagnostic.js && node tests/test_format_engine_parity.js && node tests/test_uri_helper_parity.js && node tests/test_formats_single_pass.js && node tests/test_format_single_error.js && node tests/test_defs_pointer_alias.js && node tests/test_cross_doc_root_ref.js && node tests/test_codegen_entrypoint_agreement.js && node tests/test_hybrid_agreement.js && node tests/test_codegen_edge_shapes.js && node tests/test_ajv_errors.js && node tests/test_custom_keywords.js && node tests/test_aot_external_checks.js && node tests/test_ajv_parity.js && node tests/test_user_format_error_path.js && node tests/test_unevaluated_error_path.js && node tests/test_pattern_properties_errors.js && node tests/test_no_input_mutation.js && node tests/test_typed_validator_runner.js && node tests/test_define_schema.js && node tests/test_error_codes_lock.js && node tests/test_error_code_lookup.js && node tests/test_error_order.js && node tests/test_error_order_ordinal.js && node tests/test_rejection_shape.js && node tests/test_lazy_normalization.js && node tests/test_value_equality.js && node tests/test_vocabulary.js && node tests/test_schema_scan.js && node tests/test_lazy_errors.js && node tests/test_lazy_instance.js && node tests/test_cyclic_input.js && node tests/test_native_error_codes.js && node tests/test_verdict_preprocess.js && node tests/test_plan_compiler.js && node tests/test_nullable.js && node tests/test_validate_and_parse.js && node tests/test_validate_data.js && node tests/test_enrich_error.js && node tests/test_enrich_received.js && node tests/test_rich_errors_optout.js && node tests/test_error_messages.js && node tests/test_source_positions.js && node tests/fuzz_positions.js && node tests/test_data_positions.js && node tests/test_render_shared.js && node tests/test_renderers.js && node tests/test_additive_fields.js && node tests/test_diagnostic_source.js && node tests/test_diagnose.js && node tests/test_correlate.js && node tests/test_diagnostics_score.js && node tests/test_runtime_error_dx.js && node tests/test_aot_error_dx.js && node tests/test_abort_early.js && node tests/test_branch_collapse.js && node tests/test_suggestions.js && node tests/test_cli_validate.js && node tests/test_cli_version.js && node benchmark/bench_aot_size.mjs",
+    "test": "node test.js && node tests/test_removed_aot_methods.js && node tests/test_no_native.js && node tests/test_no_eval.js && node tests/test_property_dependencies.js && node tests/test_v1_dialect.js && node tests/test_buffer_path_parity.js && node tests/test_buffer_gate.js && node tests/test_buffer_reject_cost.js && node tests/test_nan_verdict.js && node tests/test_remove_additional_nested.js && node tests/test_exclusive_bounds.js && node tests/test_engine_differential.js && node tests/test_error_shape_differential.js && node tests/test_output_format.js && node tests/test_retry_message.js && node tests/test_describe_schema.js && node tests/test_aot_parse.js && node tests/test_draft7_semantics.js && node tests/test_metaschema_ref.js && node tests/test_pure_js_unsupported.js && node tests/test_native_load_order.js && node tests/test_pack_purity.js && node tests/test_make_native_package.js && node tests/test_browser_nofs.js && node tests/test_browser_imports_guard.js && node tests/test_version_sync.js && node tests/test_native_loaded.js && node tests/test_safe_regex_source_sync.js && node tests/test_t_builder.js && node tests/test_async_refine.js && node tests/test_safe_regex.js && node tests/test_safe_regex_integration.js && node tests/test_aot_build.js && node tests/test_aot_differential.js && node tests/test_aot_cli_build.js && node tests/test_aot_cli_smoke.js && node tests/test_bundle_standalone.js && node tests/test_standalone_anyof.js && node tests/test_standalone_formats.js && node tests/test_aot_format_mode.js && node tests/test_aot_additional_props_errors.js && node tests/test_id_anchor_refs.js && node tests/test_engine_routing.js && node tests/test_compile_cache_order.js && node tests/test_engine_diagnostic.js && node tests/test_format_engine_parity.js && node tests/test_uri_helper_parity.js && node tests/test_formats_single_pass.js && node tests/test_format_single_error.js && node tests/test_defs_pointer_alias.js && node tests/test_cross_doc_root_ref.js && node tests/test_codegen_entrypoint_agreement.js && node tests/test_hybrid_agreement.js && node tests/test_codegen_edge_shapes.js && node tests/test_ajv_errors.js && node tests/test_custom_keywords.js && node tests/test_aot_external_checks.js && node tests/test_ajv_parity.js && node tests/test_user_format_error_path.js && node tests/test_unevaluated_error_path.js && node tests/test_unevaluated_error_shape.js && node tests/test_pattern_properties_errors.js && node tests/test_additional_properties_scaling.js && node tests/test_no_input_mutation.js && node tests/test_typed_validator_runner.js && node tests/test_define_schema.js && node tests/test_error_codes_lock.js && node tests/test_error_code_lookup.js && node tests/test_error_order.js && node tests/test_error_order_ordinal.js && node tests/test_rejection_shape.js && node tests/test_lazy_normalization.js && node tests/test_value_equality.js && node tests/test_vocabulary.js && node tests/test_schema_scan.js && node tests/test_lazy_errors.js && node tests/test_lazy_instance.js && node tests/test_cyclic_input.js && node tests/test_native_error_codes.js && node tests/test_verdict_preprocess.js && node tests/test_plan_compiler.js && node tests/test_nullable.js && node tests/test_validate_and_parse.js && node tests/test_validate_data.js && node tests/test_enrich_error.js && node tests/test_enrich_received.js && node tests/test_rich_errors_optout.js && node tests/test_error_messages.js && node tests/test_source_positions.js && node tests/fuzz_positions.js && node tests/test_malformed_json_termination.js && node tests/test_data_positions.js && node tests/test_render_shared.js && node tests/test_renderers.js && node tests/test_additive_fields.js && node tests/test_diagnostic_source.js && node tests/test_diagnose.js && node tests/test_correlate.js && node tests/test_diagnostics_score.js && node tests/test_runtime_error_dx.js && node tests/test_aot_error_dx.js && node tests/test_abort_early.js && node tests/test_branch_collapse.js && node tests/test_suggestions.js && node tests/test_cli_validate.js && node tests/test_cli_version.js && node benchmark/bench_aot_size.mjs",
     "bench:size": "node benchmark/bench_aot_size.mjs",
     "test:suite": "node tests/run_suite.js && node tests/run_suite.js draft7 && node tests/run_suite.js v1",
     "test:compat": "node tests/test_compat.js",
@@ -122,13 +122,13 @@
     "LICENSE"
   ],
   "optionalDependencies": {
-    "@ata-validator/native-darwin-arm64": "1.22.0",
-    "@ata-validator/native-darwin-x64": "1.22.0",
-    "@ata-validator/native-linux-arm64-gnu": "1.22.0",
-    "@ata-validator/native-linux-arm64-musl": "1.22.0",
-    "@ata-validator/native-linux-x64-gnu": "1.22.0",
-    "@ata-validator/native-linux-x64-musl": "1.22.0",
-    "@ata-validator/native-win32-x64": "1.22.0"
+    "@ata-validator/native-darwin-arm64": "1.22.1",
+    "@ata-validator/native-darwin-x64": "1.22.1",
+    "@ata-validator/native-linux-arm64-gnu": "1.22.1",
+    "@ata-validator/native-linux-arm64-musl": "1.22.1",
+    "@ata-validator/native-linux-x64-gnu": "1.22.1",
+    "@ata-validator/native-linux-x64-musl": "1.22.1",
+    "@ata-validator/native-win32-x64": "1.22.1"
   },
   "peerDependencies": {
     "yaml": "^2.0.0"