ata-validator 1.3.0 → 1.5.0

package/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 All notable changes to ata-validator are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/), and this project adheres to semantic versioning.
 
+## 1.5.0 - 2026-08-05
+
+### Added
+
+- `propertyDependencies`, a JSON Schema v1 [proposal](https://github.com/json-schema-org/json-schema-spec/blob/main/specs/proposals/propertyDependencies.md), selects a subschema by the value of a property rather than by its presence. It replaces the `oneOf` and `if`/`then` patterns normally used to branch on a discriminator field, and reads as `{ "propertyDependencies": { "type": { "customer": { ... }, "employee": { ... } } } }`. The proposal defines the keyword as equivalent to an `if`/`then` on `const`, and `tests/test_property_dependencies.js` checks that equivalence case by case rather than asserting a separate expectation, alongside the proposal's own test files from the official suite: 36 of 38, the two remaining being a `$dynamicRef` scope gap the `if`/`then` form of the same schema hits identically.
+- The keyword is implemented in the interpreted engine. Both JS compiler paths decline a schema that uses it rather than emitting nothing for a keyword they do not know, which would make the constraint vacuous.
+
+## 1.4.0 - 2026-08-04
+
+### Fixed
+
+- Where `new Function` is unavailable, validation now runs on the interpreted engine instead of degrading quietly. Cloudflare Workers, Deno Deploy and pages under a strict Content-Security-Policy refuse code generation; the closure-based path does not call `new Function` itself, so it survived the refusal and went on to handle schemas it gets wrong. Against the full suite with code generation blocked, ata scored 1188 of 1290 with 30 schemas failing to build. It now scores 1286 of 1290 with none, which is the same as the compiled path within one case. Draft 7 is 910 of 922. `tests/test_no_eval.js` runs the whole suite with `eval` and `new Function` blocked so this is checked rather than assumed.
+
 ## 1.3.0 - 2026-08-02
 
 ### Added

package/README.md

@@ -20,7 +20,7 @@ The `ata-validator` package itself is pure JavaScript. The native accelerator (s
 npm install ata-validator --omit=optional
 ```
 
-or set `ATA_NO_NATIVE=1` at runtime. Typical schemas compile to specialized JS; shapes the compiler cannot represent (some `$dynamicRef`, cyclic `$ref`, unusual keyword interactions) fall back to an interpreted engine, so every schema validates in every environment. The pure-JS setup passes 99.8% of the official draft 2020-12 test suite. Only the buffer and parallel APIs (`isValid` on raw buffers, `countValid`, `batchIsValid`, `validateAndParse`) need the native engine and say so with a clear error.
+or set `ATA_NO_NATIVE=1` at runtime. Typical schemas compile to specialized JS; shapes the compiler cannot represent (some `$dynamicRef`, cyclic `$ref`, unusual keyword interactions) fall back to an interpreted engine, so every schema validates in every environment. The pure-JS setup scores the same on the official suite as the native one, 1285 of 1290 Draft 2020-12 cases; the two miss a different `$dynamicRef` scope corner each. Only the buffer and parallel APIs (`isValid` on raw buffers, `countValid`, `batchIsValid`, `validateAndParse`) need the native engine and say so with a clear error.
 
 In your code:
 
@@ -466,14 +466,17 @@ Copy-paste recipes for the common frameworks. Most need 10-20 lines of glue. See
 
 ### Known limitations
 
-The Draft 2020-12 pass rate (1188 of 1190 applicable cases, 99.8%, in the pure-JS configuration; 1190 of 1190 with the native accelerator installed, which covers the two remaining `$dynamicRef` scope corners) excludes areas that are deliberate scope decisions for 1.x:
+Running the whole Draft 2020-12 suite with nothing excluded, `format` and `default` under specification semantics (`assertFormat: false`, `useDefaults: false`), gives 1285 of 1290 cases, 99.6%. Draft 7 gives 911 of 922, 98.8%. `npm run test:suite` reproduces both and lists the remaining failures by name.
+
+Areas that remain deliberate scope decisions for 1.x:
 
 - **Remote `$ref` over the network** is not fetched. Register cross-schema refs explicitly with `schemas: [...]` or `addSchema()`.
 - **`$vocabulary`** is not implemented; custom vocabularies are ignored rather than enforced.
 - **`contentEncoding` / `contentMediaType` / `contentSchema`** are annotation-only, as the spec permits, and are not validated.
 - **`minLength`/`maxLength`** count UTF-16 code units, not grapheme clusters.
-- **Infinite-loop detection** suite cases are skipped; circular `$ref` chains are cut off by a recursion depth guard instead.
-- **`default`** optional suite tests are excluded; ata applies `default` values to validated data, where the spec treats `default` as a non-enforcing annotation.
+- **Infinite-loop detection** relies on a recursion depth guard that cuts off circular `$ref` chains.
+- **`default`** values are applied to validated data by default, where the spec treats `default` as a non-enforcing annotation. Pass `useDefaults: false` for the specification behavior.
+- **`format`** is asserted by default rather than treated as an annotation. Pass `assertFormat: false` for the specification behavior.
 
 If one of these blocks you, open an issue; scope decisions get revisited with real use cases.
 

package/index.js

@@ -271,6 +271,21 @@ function buildPreprocessCodegen(schema, options) {
   }
 }
 
+// Cloudflare Workers, Deno Deploy and pages under a strict Content-Security-
+// Policy refuse `new Function`. Probed once, lazily, because the answer cannot
+// change within a realm and the probe itself is a code generation attempt.
+let _codegenAvailable = null;
+function codegenAvailable() {
+  if (_codegenAvailable === null) {
+    try {
+      _codegenAvailable = new Function('return 1')() === 1;
+    } catch {
+      _codegenAvailable = false;
+    }
+  }
+  return _codegenAvailable;
+}
+
 // Schema compilation cache: same schema string -> reuse compiled functions
 const _compileCache = new Map();
 
@@ -709,7 +724,13 @@ class Validator {
     const cached = this._userFormats ? null : _compileCache.get(mapKey);
     let jsFn, jsCombinedFn, jsErrFn, _isCodegen = false;
     var _forceNapi = typeof process !== 'undefined' && process.env && process.env.ATA_FORCE_NAPI;
-    if (cached && !_forceNapi) {
+    // Where source cannot be turned into a function, neither JS path is usable.
+    // The closure path does not call `new Function` itself, so it survives the
+    // block and would quietly handle schemas it gets wrong; the interpreted
+    // engine is both eval-free and more correct, so go straight there.
+    if (!codegenAvailable()) {
+      jsFn = null; jsCombinedFn = null; jsErrFn = null;
+    } else if (cached && !_forceNapi) {
       jsFn = cached.jsFn;
       jsCombinedFn = cached.combined;
       jsErrFn = cached.errFn;
@@ -1040,8 +1061,11 @@ class Validator {
       this._ensureNative();
       const _hasDynRef = this._schemaStr.includes('"$dynamicRef"') || this._schemaStr.includes('"$dynamicAnchor"')
       const _hasUneval = this._schemaStr.includes('"unevaluatedProperties"') || this._schemaStr.includes('"unevaluatedItems"')
+      // propertyDependencies exists only in the interpreted engine, so a schema
+      // using it goes there even when it also uses $dynamicRef.
+      const _hasPropDeps = this._schemaStr.includes('"propertyDependencies"')
       let _validate;
-      if (_hasDynRef && !_hasUneval) {
+      if (_hasDynRef && !_hasUneval && !_hasPropDeps) {
         // validateJSON is the C++ path with full anchor-map support; the NAPI
         // direct V8 `validate` path has no anchor maps.
         _validate = (data) => this._compiled.validateJSON(JSON.stringify(data));

package/lib/interpreter.js

@@ -102,6 +102,16 @@ function walkSchema(node, baseUri, state, isResourceRoot) {
     const list = node[kw];
     if (Array.isArray(list)) for (const sub of list) walkSchema(sub, baseUri, state, false);
   }
+  // propertyDependencies nests one level deeper than the other maps:
+  // property name -> property value -> schema.
+  const propDeps = node.propertyDependencies;
+  if (propDeps && typeof propDeps === 'object' && !Array.isArray(propDeps)) {
+    for (const choices of Object.values(propDeps)) {
+      if (choices && typeof choices === 'object' && !Array.isArray(choices)) {
+        for (const sub of Object.values(choices)) walkSchema(sub, baseUri, state, false);
+      }
+    }
+  }
 }
 
 // ---------- ref resolution ----------
@@ -504,6 +514,23 @@ class Interpreter {
           }
         }
       }
+      // propertyDependencies: like dependentSchemas but keyed on the property's
+      // value rather than its presence. Only string values can match, since the
+      // inner keys are object keys. Equivalent to
+      // `if: { properties: { p: { const: v } }, required: [p] }, then: <schema>`.
+      if (schema.propertyDependencies && typeof schema.propertyDependencies === 'object') {
+        for (const [key, choices] of Object.entries(schema.propertyDependencies)) {
+          if (!choices || typeof choices !== 'object' || Array.isArray(choices)) continue;
+          if (!Object.prototype.hasOwnProperty.call(data, key)) continue;
+          const value = data[key];
+          if (typeof value !== 'string') continue;
+          if (!Object.prototype.hasOwnProperty.call(choices, value)) continue;
+          const sub = { props: null, items: null };
+          const branchPath = schemaPath + '/propertyDependencies/' + escapePointer(key) + '/' + escapePointer(value);
+          if (!this.eval(choices[value], data, base, dynScope, errors, instancePath, branchPath, stack, sub)) valid = false;
+          else mergeAnnotations(local, sub);
+        }
+      }
     }
 
     // in-place applicators

package/lib/js-compiler.js

@@ -115,6 +115,7 @@ function compileToJS(schema, defs, schemaMap) {
   // Bail on features that are too complex for JS fast path
   if (schema.patternProperties ||
       schema.dependentSchemas ||
+      schema.propertyDependencies ||
       schema.propertyNames) {
     return null
   }
@@ -749,6 +750,11 @@ function codegenSafe(schema, schemaMap) {
   if (typeof schema === 'boolean') return true
   if (typeof schema !== 'object' || schema === null) return true
 
+  // propertyDependencies is a proposal the interpreted engine implements and
+  // neither JS path does. Emitting nothing for it would make the keyword
+  // vacuous, so hand the schema over rather than silently ignore a constraint.
+  if (schema.propertyDependencies !== undefined) return false
+
   // Only bail on $dynamicRef if it can't be resolved at compile time
   if (schema.$dynamicRef && !schema.$dynamicRef.startsWith('#')) return false
 

package/lib/version.js

@@ -7,4 +7,4 @@
 //
 // Kept in lockstep with package.json by `tests/test_version_sync.js`.
 
-module.exports = '1.3.0';
+module.exports = '1.5.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ata-validator",
-  "version": "1.3.0",
+  "version": "1.5.0",
   "description": "JSON Schema validation with first-class TypeScript and zero runtime cost. AOT compile to per-schema ESM modules with zero validator dependency. Generic Validator<T> for TypeBox/Zod/Valibot composition. Optional runtime API. Standard Schema V1 compatible.",
   "main": "index.js",
   "module": "index.mjs",
@@ -44,9 +44,9 @@
     "release:check": "node scripts/regen-safe-regex-source.js && node tests/test_pack_purity.js && node scripts/check-doc-coverage.js && node tests/test_error_codes_lock.js && node tests/test_safe_regex_source_sync.js && node tests/test_version_sync.js",
     "build": "cmake-js build --target ata",
     "rebuild": "cmake-js rebuild --target ata",
-    "test": "node test.js && node tests/test_removed_aot_methods.js && node tests/test_no_native.js && node tests/test_pure_js_unsupported.js && node tests/test_native_load_order.js && node tests/test_pack_purity.js && node tests/test_make_native_package.js && node tests/test_browser_nofs.js && node tests/test_browser_imports_guard.js && node tests/test_version_sync.js && node tests/test_safe_regex_source_sync.js && node tests/test_t_builder.js && node tests/test_async_refine.js && node tests/test_safe_regex.js && node tests/test_safe_regex_integration.js && node tests/test_aot_build.js && node tests/test_aot_differential.js && node tests/test_aot_cli_build.js && node tests/test_aot_cli_smoke.js && node tests/test_bundle_standalone.js && node tests/test_standalone_anyof.js && node tests/test_standalone_formats.js && node tests/test_aot_additional_props_errors.js && node tests/test_id_anchor_refs.js && node tests/test_engine_routing.js && node tests/test_format_engine_parity.js && node tests/test_defs_pointer_alias.js && node tests/test_no_input_mutation.js && node tests/test_typed_validator_runner.js && node tests/test_define_schema.js && node tests/test_error_codes_lock.js && node tests/test_error_order.js && node tests/test_nullable.js && node tests/test_validate_and_parse.js && node tests/test_validate_data.js && node tests/test_enrich_error.js && node tests/test_rich_errors_optout.js && node tests/test_error_messages.js && node tests/test_source_positions.js && node tests/fuzz_positions.js && node tests/test_data_positions.js && node tests/test_render_shared.js && node tests/test_renderers.js && node tests/test_runtime_error_dx.js && node tests/test_aot_error_dx.js && node tests/test_abort_early.js && node tests/test_branch_collapse.js && node tests/test_suggestions.js && node tests/test_cli_validate.js && node tests/test_cli_version.js && node benchmark/bench_aot_size.mjs",
+    "test": "node test.js && node tests/test_removed_aot_methods.js && node tests/test_no_native.js && node tests/test_no_eval.js && node tests/test_property_dependencies.js && node tests/test_pure_js_unsupported.js && node tests/test_native_load_order.js && node tests/test_pack_purity.js && node tests/test_make_native_package.js && node tests/test_browser_nofs.js && node tests/test_browser_imports_guard.js && node tests/test_version_sync.js && node tests/test_safe_regex_source_sync.js && node tests/test_t_builder.js && node tests/test_async_refine.js && node tests/test_safe_regex.js && node tests/test_safe_regex_integration.js && node tests/test_aot_build.js && node tests/test_aot_differential.js && node tests/test_aot_cli_build.js && node tests/test_aot_cli_smoke.js && node tests/test_bundle_standalone.js && node tests/test_standalone_anyof.js && node tests/test_standalone_formats.js && node tests/test_aot_additional_props_errors.js && node tests/test_id_anchor_refs.js && node tests/test_engine_routing.js && node tests/test_format_engine_parity.js && node tests/test_defs_pointer_alias.js && node tests/test_no_input_mutation.js && node tests/test_typed_validator_runner.js && node tests/test_define_schema.js && node tests/test_error_codes_lock.js && node tests/test_error_order.js && node tests/test_nullable.js && node tests/test_validate_and_parse.js && node tests/test_validate_data.js && node tests/test_enrich_error.js && node tests/test_rich_errors_optout.js && node tests/test_error_messages.js && node tests/test_source_positions.js && node tests/fuzz_positions.js && node tests/test_data_positions.js && node tests/test_render_shared.js && node tests/test_renderers.js && node tests/test_runtime_error_dx.js && node tests/test_aot_error_dx.js && node tests/test_abort_early.js && node tests/test_branch_collapse.js && node tests/test_suggestions.js && node tests/test_cli_validate.js && node tests/test_cli_version.js && node benchmark/bench_aot_size.mjs",
     "bench:size": "node benchmark/bench_aot_size.mjs",
-    "test:suite": "node tests/run_suite.js",
+    "test:suite": "node tests/run_suite.js && node tests/run_suite.js draft7",
     "test:compat": "node tests/test_compat.js",
     "test:standard-schema": "node tests/test_standard_schema.js",
     "test:browser": "node tests/test_browser.js",
@@ -112,12 +112,12 @@
     "LICENSE"
   ],
   "optionalDependencies": {
-    "@ata-validator/native-darwin-arm64": "1.3.0",
-    "@ata-validator/native-linux-x64-gnu": "1.3.0",
-    "@ata-validator/native-linux-arm64-gnu": "1.3.0",
-    "@ata-validator/native-linux-x64-musl": "1.3.0",
-    "@ata-validator/native-linux-arm64-musl": "1.3.0",
-    "@ata-validator/native-win32-x64": "1.3.0"
+    "@ata-validator/native-darwin-arm64": "1.5.0",
+    "@ata-validator/native-linux-x64-gnu": "1.5.0",
+    "@ata-validator/native-linux-arm64-gnu": "1.5.0",
+    "@ata-validator/native-linux-x64-musl": "1.5.0",
+    "@ata-validator/native-linux-arm64-musl": "1.5.0",
+    "@ata-validator/native-win32-x64": "1.5.0"
   },
   "peerDependencies": {
     "yaml": "^2.0.0"