ata-validator 1.32.0 → 1.32.2

package/README.md

@@ -53,15 +53,24 @@ The `.compiled.mjs` modules are self-contained: zero runtime dependency on ata-v
 
 ## Measured by others
 
-Two public harnesses run ata without ata's involvement. Quote these before anything in this
+Public harnesses run ata without ata's involvement. Quote these before anything in this
 file.
 
+- The [runtime type benchmark](https://moltar.github.io/typescript-runtime-type-benchmarks/)
+  maintained by moltar, 44 to 56 libraries per test. In its official run on Node 24, with ata
+  1.32.0, ata is first of 45 on assertStrict at 37.2M operations a second, and its
+  ahead-of-time entry is first of 44 on parseStrict at 36.3M, with the runtime entry second.
+  On assertLoose ata is fifth of 56 and on parseSafe sixth of 45. Some of the entries ahead
+  of it on those two rows skip checks JSON Schema requires there, such as rejecting an array
+  where an object is declared or NaN where a number is. On Deno the same run puts ata between
+  12th and 23rd; 1.32.1 makes it about 2.5 times faster there, locally, and had not been
+  through the harness yet at the time of writing.
 - [schemabenchmarks.dev](https://schemabenchmarks.dev), a benchmark of runtime validation
-  libraries maintained outside this project. On its validation page, valid data, the run of
-  2026-09-13 against ata 1.14.1 puts ata first at 603 ns, with the next entry at 1.77 times
-  that. The same site puts ata last on the download page, at 64.9 KB gzipped, because the entry
-  it bundles is the runtime compiler; the module `ata build` emits for that schema is 5.1 KB
-  minified and gzipped, and a compiled entry for the harness is in preparation.
+  libraries. Its published run of 2026-09-25 still uses ata 1.29.0 and puts it sixth of 30 on
+  valid data at 870 ns and tenth on invalid data at 67 ns. Most of that time was the `uri`
+  format check and a wrapper in the keywords package, both rewritten since. Run locally on an
+  Apple M4 Pro, the same harness takes ata from 365 ns on 1.29.0 to 240 ns on 1.32.1 for valid
+  data, with invalid data at 21 ns on both; those are local figures, not the site's.
 - [Bowtie](https://bowtie.report/), the cross-implementation JSON Schema test harness. ata's
   harness runs Draft 2020-12 and draft 7 there; on the harness at ata 1.16.1 the official suite
   passes with nothing failed, errored or skipped under Bowtie's own runner. The v1 dialect is
@@ -71,19 +80,20 @@ file.
 
 | Dimension | Schema | ata-AOT | runtime validator | Difference |
 |---|---|---|---|---|
-| Bundle (gzipped) | simple | 1.1 KB | 52.7 KB | 48.1x smaller |
-| Bundle (gzipped) | complex | 7.6 KB | 52.7 KB | 7.0x smaller |
-| Bundle (gzipped) | nested | 4.1 KB | 52.7 KB | 13.0x smaller |
-| Cold start | simple | 21 ms | 40 ms | 1.9x faster |
-| Throughput (1M ops) | simple | 257 Mops/s | 114 Mops/s | 2.3x faster |
-| Compile time | simple | 14 µs | 1.52 ms | 111x faster |
+| Bundle (gzipped) | simple | 1.3 KB | 52.7 KB | 39.8x smaller |
+| Bundle (gzipped) | complex | 7.8 KB | 52.7 KB | 6.7x smaller |
+| Bundle (gzipped) | nested | 4.5 KB | 52.7 KB | 11.8x smaller |
+| Cold start | simple | 22 ms | 48 ms | 2.2x faster |
+| Throughput (1M ops) | simple | 307 Mops/s | 100 Mops/s | 3.1x faster |
+| Compile time | simple | 17 µs | 1.62 ms | 93x faster |
 
 The runtime column is the default validator most frameworks ship. Reproduce on your machine
-with `npm run bench:aot-vs-ajv`. Numbers from one run on Apple M4 Pro, Node 25.2.1, 2026-09-17,
-on ata-validator 1.25.0, whose emitted modules carry full error detail and a schema hash, which
-is where the growth over earlier 1.x module sizes comes from. Across three runs throughput moved
-between 257 and 297 Mops/s and the compile ratio between 104x and 112x, so treat the last two
-rows as an order of magnitude rather than a constant.
+with `npm run bench:aot-vs-ajv`. Numbers from one run on Apple M4 Pro, Node 25.2.1, 2026-09-27,
+on ata-validator 1.32.1. Emitted modules are about 0.2 to 0.4 KB larger gzipped than on 1.25.0,
+which is what the exact own-property checks added in 1.31.2 cost. Across three runs throughput
+moved between 296 and 307 Mops/s against 99 to 107, cold start between 21 and 22 ms against 41
+to 48, and the compile ratio between 87x and 95x, so treat the last three rows as an order of
+magnitude rather than a constant.
 
 The wins are largest on bundle size and compile time because AOT moves work from runtime to
 build time. Throughput and cold start are also faster because the compiled validator is a
@@ -211,19 +221,20 @@ is the most common way to get a misleading number out of this library.
 
 | | compiled with `ata build` | runtime `new Validator(schema)` |
 |---|---|---|
-| In a bundle, gzipped | **4.5 KB** | 87.0 KB |
-| Time to a served request | **3.4 ms** | 10.6 ms |
+| In a bundle, gzipped | **2.3 KB** | 91.4 KB |
+| Time to a served request | **3.4 ms** | 11.2 ms |
 | Schema known when | build time | any time |
 
-The bundle row is a ten-field user schema built with
-`bun build --minify --target=browser`. The startup row is a Hono route on Bun 1.4, best
-of seven, against 3.7 ms for the same app doing no validation at all, so the compiled
-path costs nothing measurable to start. The runtime
+The bundle row is the ten-field user schema in `tests/fixtures/error-dx/user.schema.json`,
+every export of the compiled module against `new Validator(schema)`, built with
+`bun build --minify --target=browser` on ata 1.32.1. The startup row is a Hono route on
+Bun 1.4, best of seven, from `benchmark/bundle`, against 3.5 ms for the same app doing no
+validation at all, so the compiled path costs nothing measurable to start. The runtime
 figure is what it is because a schema that arrives at run time can use any keyword, so
 the whole engine has to be there. The compiled module imports nothing and contains only
 the checks your schema asks for.
 
-**On a server, use whichever fits your schemas.** 87 KB of JavaScript on a Node or Bun
+**On a server, use whichever fits your schemas.** 91 KB of JavaScript on a Node or Bun
 process is not a cost anyone notices, and the runtime API is the simpler thing to reach
 for. Speed is the same either way once warm.
 
@@ -262,7 +273,7 @@ const v = new Validator({
   required: ['name', 'email']
 });
 
-// Fast boolean check - JS codegen, 15.3M ops/sec
+// Fast boolean check, compiled to JS
 v.isValidObject({ name: 'Mert', email: 'mert@example.com', age: 26 }); // true
 
 // Full validation with error details + defaults applied
@@ -279,7 +290,7 @@ v.isValid(Buffer.from('{"name": "Mert", "email": "mert@example.com"}'));
 // Which engine answers this schema: 'codegen', 'closure', 'native' or 'interpreter'
 v.engine(); // 'codegen'
 
-// Parallel batch - multi-core, NDJSON, 13.4M items/sec
+// Parallel batch, multi-core, NDJSON
 const ndjson = Buffer.from(lines.join('\n'));
 v.isValidParallel(ndjson);  // bool[]
 v.countValid(ndjson);        // number
@@ -455,7 +466,7 @@ const v = new Validator(schema, {
 
 ### Build-time compile (`ata compile`)
 
-The `ata` CLI turns a JSON Schema file into a self-contained JavaScript module. No runtime dependency on `ata-validator`, so only the generated validator ships to the browser. Typical output is about 4.5 KB gzipped for a ten-field schema, full error detail included, against 87 KB for the runtime bundled for the browser.
+The `ata` CLI turns a JSON Schema file into a self-contained JavaScript module. No runtime dependency on `ata-validator`, so only the generated validator ships to the browser. For the ten-field user schema in `tests/fixtures/error-dx/user.schema.json` the module is 2.6 KB gzipped, full error detail included, against 91 KB for the runtime bundled for the browser.
 
 ```bash
 npx ata compile schemas/user.json -o src/generated/user.validator.mjs
@@ -496,14 +507,14 @@ npx ata build 'schemas/*.json' --out-dir build/validators --check
 
 Run with `--watch` during development for incremental rebuilds.
 
-Bundle sizes for a 10-field user schema, minified and gzipped, measured with
-`bun build --minify --target=browser`:
+Bundle sizes for the 10-field user schema in `tests/fixtures/error-dx/user.schema.json`,
+minified and gzipped, measured with `bun build --minify --target=browser` on ata 1.32.1:
 
 | What the app imports | Size | Notes |
 |---|---|---|
-| `Validator` from `ata-validator` | 74.1 KB | The compiler ships with it, because a runtime schema can use any keyword |
-| `isValid` from the compiled module | **1.9 KB** | Nothing else is reachable, so the error collector is dropped |
-| `validate` from the compiled module | **3.6 KB** | Adds the detailed error collector |
+| `Validator` from `ata-validator` | 91.3 KB | The compiler ships with it, because a runtime schema can use any keyword |
+| `isValid` from the compiled module | **1.2 KB** | Nothing else is reachable, so the error collector is dropped |
+| `validate` from the compiled module | **2.1 KB** | Adds the detailed error collector |
 
 `--abort-early` makes the generated source about three times smaller, and after
 bundling it makes no difference: importing only `isValid` already leaves the error
@@ -526,7 +537,7 @@ through a `setFormats()` export the module carries. `docs/API.md` has the
 details.
 
 **Fastify startup, 10 route schemas, from a cold process to the first validated request:
-ajv 19.6 ms, ata 3.1 ms, no build step required.** ata registers in 1.1 ms of that and
+ajv 20.2 ms, ata 3.9 ms, no build step required.** ata registers in 0.2 ms of that and
 compiles on the first request, so counting only registration would overstate the gap.
 Reproduce with `node benchmark/bench_fastify_boot.mjs`.
 

package/index.js

@@ -371,6 +371,9 @@ const _identityCache = new WeakMap();
 
 const SIMDJSON_PADDING = 64;
 const VALID_RESULT = Object.freeze({ valid: true, errors: Object.freeze([]) });
+// How many calls a validator answers through its verdict function before its
+// validate() and validateJSON() compile the single-function hybrid.
+const HYBRID_TIER_CALLS = 64;
 const ABORT_EARLY_RESULT = Object.freeze({
   valid: false,
   errors: Object.freeze([Object.freeze({
@@ -1543,8 +1546,20 @@ class Validator {
           if (combined) { impl = combined; return _mustReject(combined(data)); }
           return errOnly(data);
         };
-        const hybridFn = jsFn._hybridFactory(VALID_RESULT, onReject);
-        impl = hybridFn;
+        // Tiered: the first calls go through the verdict function and the
+        // resolver, and the hybrid is compiled once the validator is in use.
+        // Compiling it up front was a second parse of the whole schema on
+        // every validator, most of which answer a handful of requests or only
+        // verdicts. A refused compile stays on the first tier.
+        let warm = 0;
+        const first = (data) => {
+          if (++warm >= HYBRID_TIER_CALLS && impl === first) {
+            impl = jsFn._hybridFactory(VALID_RESULT, onReject) || ((d) => (jsFn(d) ? VALID_RESULT : onReject(d)));
+            return impl(data);
+          }
+          return jsFn(data) ? VALID_RESULT : onReject(data);
+        };
+        impl = first;
         const run = (data) => impl(data);
         this.validate = preprocess
           ? (data) => { preprocess(data); return run(data); }
@@ -1613,11 +1628,18 @@ class Validator {
       // it validates and collects in one pass, and the error generator behind
       // it. `errPreferCombined` is that order, resolved on the first rejection
       // instead of at compile time.
-      const hybridFn = jsFn._hybridFactory
-        ? jsFn._hybridFactory(VALID_RESULT, errPreferCombined)
-        : null;
-      const jsonValidateInner = hybridFn
-        || ((obj) => (jsFn(obj) ? VALID_RESULT : errPreferCombined(obj)));
+      // Tiered the same way as validate() above.
+      let jsonHybrid = null;
+      let jsonWarm = 0;
+      const jsonValidateInner = (obj) => {
+        if (jsonHybrid !== null) return jsonHybrid(obj);
+        if (++jsonWarm >= HYBRID_TIER_CALLS) {
+          jsonHybrid = (jsFn._hybridFactory && jsFn._hybridFactory(VALID_RESULT, errPreferCombined))
+            || ((o) => (jsFn(o) ? VALID_RESULT : errPreferCombined(o)));
+          return jsonHybrid(obj);
+        }
+        return jsFn(obj) ? VALID_RESULT : errPreferCombined(obj);
+      };
       // Parsed text takes the same preprocess pass as a parsed object, so
       // validate(obj) and validateJSON(text) answer the same for the same
       // document. Without it, coercion, removal and defaults applied on one

package/lib/js-compiler.js

@@ -918,9 +918,28 @@ const PROTO_NAMES = new Set([...Object.getOwnPropertyNames(Object.prototype), '_
 // and reading the errors of a product document went from 3.9 to 5.8 us. The
 // helper only runs once `in` has said yes, and on an ordinary object it
 // answers from the prototype without looking at the key.
-const OWN_HELPERS = 'const _hop=Object.prototype.hasOwnProperty;function _h(o,k){return _hop.call(o,k)}' +
-  'function _ok(o,k){return o.__proto__===Object.prototype||_hop.call(o,k)}' +
-  'function _hall(o,ks){for(let i=0;i<ks.length;i++)if(!_hop.call(o,ks[i]))return false;return true}'
+//
+// `__proto__` is read through the accessor on Object.prototype, which Deno
+// removes. There every read came back undefined, every object took the per-key
+// hasOwnProperty path, and a ten-field check went from 2.5 to 40 ns. Where the
+// accessor is missing the prototype comes from Object.getPrototypeOf instead,
+// chosen by a constant the engine folds, so Node pays nothing for the branch.
+// Each helper is hoisted only where something emitted uses it, with what it
+// depends on. Hoisting all of them as one block put five declarations into
+// every module that asked about presence at all, about a sixth of a small
+// schema's compiled module.
+const OWN_HELPER_CODE = {
+  _PN: 'const _PN=({}).__proto__===Object.prototype;const _OP=Object.prototype;const _gp=Object.getPrototypeOf;',
+  _hop: 'const _hop=Object.prototype.hasOwnProperty;',
+  _h: 'function _h(o,k){return _hop.call(o,k)}',
+  _ok: 'function _ok(o,k){return (_PN?o.__proto__:_gp(o))===_OP||_hop.call(o,k)}',
+  _hall: 'function _hall(o,ks){for(let i=0;i<ks.length;i++)if(!_hop.call(o,ks[i]))return false;return true}',
+}
+const OWN_HELPER_DEPS = { _h: ['_hop'], _ok: ['_PN', '_hop'], _hall: ['_hop'] }
+function useOwnHelper (ctx, name) {
+  for (const dep of OWN_HELPER_DEPS[name] || []) useOwnHelper(ctx, dep)
+  hoistOnce(ctx, '_own' + name, OWN_HELPER_CODE[name])
+}
 //
 // Better still, the prototype is read once per object: a node that asks about
 // presence declares `_pkN`, whether its value is an ordinary object, before
@@ -928,20 +947,26 @@ const OWN_HELPERS = 'const _hop=Object.prototype.hasOwnProperty;function _h(o,k)
 // helper reading `__proto__` for each key was megamorphic, since it saw every
 // object shape in the document, and cost the error path about a microsecond
 // on a product document.
+// Whether `v`, already known to be an object, has Object.prototype as its
+// prototype, read without depending on the __proto__ accessor.
+function protoIs (ctx, v) {
+  useOwnHelper(ctx, '_PN')
+  return `((_PN?${v}.__proto__:_gp(${v}))===_OP)`
+}
 function ownKeyExpr (ctx, v, key) {
-  hoistOnce(ctx, '_ownHoisted', OWN_HELPERS)
   const k = JSON.stringify(key)
-  if (PROTO_NAMES.has(key)) return `_h(${v},${k})`
   const pk = ctx.plainOf ? ctx.plainOf.get(v) : undefined
+  useOwnHelper(ctx, PROTO_NAMES.has(key) || pk !== undefined ? '_h' : '_ok')
+  if (PROTO_NAMES.has(key)) return `_h(${v},${k})`
   return pk !== undefined ? `(${pk}?${k} in ${v}:_h(${v},${k}))` : `(${k} in ${v}&&_ok(${v},${k}))`
 }
 // For a value already read as `v[key]` and found not to be undefined: whether
 // it came from `v` itself. `in` is known to hold, so only the second half runs.
 function ownGuard (ctx, v, key) {
-  hoistOnce(ctx, '_ownHoisted', OWN_HELPERS)
   const k = JSON.stringify(key)
-  if (PROTO_NAMES.has(key)) return `_h(${v},${k})`
   const pk = ctx.plainOf ? ctx.plainOf.get(v) : undefined
+  useOwnHelper(ctx, PROTO_NAMES.has(key) || pk !== undefined ? '_h' : '_ok')
+  if (PROTO_NAMES.has(key)) return `_h(${v},${k})`
   return pk !== undefined ? `(${pk}||_h(${v},${k}))` : `_ok(${v},${k})`
 }
 
@@ -957,7 +982,8 @@ function withPlain (schema, v, lines, ctx, run) {
   if (!ctx.plainOf) ctx.plainOf = new Map()
   const name = '_pk' + ctx.varCounter++
   const at = lines.length
-  lines.push(`const ${name}=typeof ${v}==='object'&&${v}!==null&&${v}.__proto__===Object.prototype`)
+  const decl = `const ${name}=typeof ${v}==='object'&&${v}!==null&&${protoIs(ctx, v)}`
+  lines.push(decl)
   const prev = ctx.plainOf.get(v)
   ctx.plainOf.set(v, name)
   try {
@@ -970,14 +996,15 @@ function withPlain (schema, v, lines, ctx, run) {
     const re = new RegExp('\\b' + name + '\\b')
     let used = false
     for (let i = at + 1; i < lines.length && !used; i++) if (re.test(lines[i])) used = true
-    if (!used && lines[at] === `const ${name}=typeof ${v}==='object'&&${v}!==null&&${v}.__proto__===Object.prototype`) lines.splice(at, 1)
+    if (!used && lines[at] === decl) lines.splice(at, 1)
   }
 }
 // The same test at run time, for the closure compiler.
 const _hop = Object.prototype.hasOwnProperty
+const _PN = ({}).__proto__ === Object.prototype
 function hasOwnKey (d, key) {
   if (PROTO_NAMES.has(key)) return _hop.call(d, key)
-  return key in d && (d.__proto__ === Object.prototype || _hop.call(d, key))
+  return key in d && ((_PN ? d.__proto__ : Object.getPrototypeOf(d)) === Object.prototype || _hop.call(d, key))
 }
 
 const UNSAFE_KEYS = new Set(['__proto__', 'constructor', 'toString', 'valueOf',
@@ -1751,7 +1778,11 @@ function compileToJSCodegen(schema, schemaMap, userFormats, opts) {
   const defSets = ctx.defFns ? Array.from(ctx.defFns.values()) : []
   const needsGuard = ctx.usesRecursion || defSets.length > 0
 
-  let body, hybridBody, tailBody
+  // The hybrid and tail forms are the same checks with different returns. They
+  // are built when first asked for, not here: most validators never call
+  // validateJSON or get extended, and rewriting and compiling the source twice
+  // more on every schema was about a third of what a first call cost.
+  let body, hybridThunk, tailThunk
   if (ctx.usesRecursion) {
     // Self-recursive: a named body reached through the cycle guard, so data
     // that points back at itself settles instead of exhausting the stack.
@@ -1760,23 +1791,25 @@ function compileToJSCodegen(schema, schemaMap, userFormats, opts) {
     const run = emitGuardedRun('return _validate(d)', '', defSets)
     body = `${decl}function _run(d){\n  ${run}\n  }\n  return _run(d)`
     // Hybrid: keep the boolean answer, wrap only the outer call
-    hybridBody = `${decl}function _run(d){\n  ${run}\n  }\n  return _run(d)?R:E(d)`
-    tailBody = `${decl}function _run(d){\n  ${run}\n  }\n  return _run(d)&&__ataTail(d)`
+    hybridThunk = () => `${decl}function _run(d){\n  ${run}\n  }\n  return _run(d)?R:E(d)`
+    tailThunk = () => `${decl}function _run(d){\n  ${run}\n  }\n  return _run(d)&&__ataTail(d)`
   } else if (defSets.length > 0) {
     // No self-reference at the root, but a def on a cycle can still be
     // re-entered with the same value; the guarded functions need their state.
     const run = emitGuardedRun(`return _body(d)`, '', defSets)
     body = `function _body(d){\n  ${checkStr}\n  return true\n  }\n  function _run(d){\n  ${run}\n  }\n  return _run(d)`
-    hybridBody = `function _body(d){\n  ${checkStr}\n  return true\n  }\n  function _run(d){\n  ${run}\n  }\n  return _run(d)?R:E(d)`
-    tailBody = `function _body(d){\n  ${checkStr}\n  return true\n  }\n  function _run(d){\n  ${run}\n  }\n  return _run(d)&&__ataTail(d)`
+    hybridThunk = () => `function _body(d){\n  ${checkStr}\n  return true\n  }\n  function _run(d){\n  ${run}\n  }\n  return _run(d)?R:E(d)`
+    tailThunk = () => `function _body(d){\n  ${checkStr}\n  return true\n  }\n  function _run(d){\n  ${run}\n  }\n  return _run(d)&&__ataTail(d)`
   } else {
     body = checkStr + '\n  return true'
-    hybridBody = replaceTopLevel(checkStr + '\n  return R')
+    hybridThunk = () => replaceTopLevel(checkStr + '\n  return R')
     // An early accept inside the checks has to reach the tail too, so every
     // top-level `return true` becomes the tail call, by the same rewrite the
     // hybrid above relies on and test_hybrid_agreement holds to the suite.
-    tailBody = replaceTopLevel(checkStr + '\n  return true', 'return __ataTail(d)', 'return false')
+    tailThunk = () => replaceTopLevel(checkStr + '\n  return true', 'return __ataTail(d)', 'return false')
   }
+  let hybridBodyMemo
+  const hybridBody = () => (hybridBodyMemo === undefined ? (hybridBodyMemo = hybridThunk()) : hybridBodyMemo)
 
   const guardStr = needsGuard ? emitGuardState() : ''
   const preambleStr = guardStr +
@@ -1794,11 +1827,20 @@ function compileToJSCodegen(schema, schemaMap, userFormats, opts) {
       boolFn = new Function('d', body)
     }
 
-    // Build hybrid: same body, return R instead of true, return E(d) instead of false.
-    try {
-      const hybridFactory = new Function(...closureNames, 'R', 'E', `${preambleStr}return function(d){${hybridBody}}`)
-      boolFn._hybridFactory = (R, E) => hybridFactory(...closureValues, R, E)
-    } catch {}
+    // The hybrid: same body, return R instead of true, return E(d) instead of
+    // false. Compiled on first request; null when that compile is refused, and
+    // the caller then assembles from the error functions instead.
+    let hybridFactory
+    boolFn._hybridFactory = (R, E) => {
+      if (hybridFactory === undefined) {
+        try {
+          hybridFactory = new Function(...closureNames, 'R', 'E', `${preambleStr}return function(d){${hybridBody()}}`)
+        } catch {
+          hybridFactory = null
+        }
+      }
+      return hybridFactory === null ? null : hybridFactory(...closureValues, R, E)
+    }
 
     // The same function with one more check where it would return true, for a
     // wrapper that enforces something the schema does not carry (see
@@ -1812,7 +1854,7 @@ function compileToJSCodegen(schema, schemaMap, userFormats, opts) {
     boolFn._withTail = (tail) => {
       if (tailFactory === undefined) {
         try {
-          tailFactory = new Function(...closureNames, '__ataTail', `${preambleStr}return function(d){${tailBody}}`)
+          tailFactory = new Function(...closureNames, '__ataTail', `${preambleStr}return function(d){${tailThunk()}}`)
         } catch {
           tailFactory = null
         }
@@ -1833,7 +1875,11 @@ function compileToJSCodegen(schema, schemaMap, userFormats, opts) {
     boolFn._preambleGuard = guardStr
     boolFn._preambleParts = ctx.preamble ? ctx.preamble.slice() : []
     boolFn._sharedHelpers = ctx.shared ? ctx.shared.slice() : []
-    boolFn._hybridSource = helperStr + hybridBody
+    Object.defineProperty(boolFn, '_hybridSource', {
+      get: () => helperStr + hybridBody(),
+      configurable: true,
+      enumerable: false,
+    })
     boolFn._usesSafeRe = !!ctx.usesSafeRe
     // Custom-format closure entries that the bundle output needs to recreate.
     // Stored as { name, fn } so consumers can serialize via Function#toString.
@@ -2266,11 +2312,11 @@ function genCodeNode(schema, v, lines, ctx, knownType) {
     }
     // On an object with another prototype the typed ones may be inherited.
     if (typed.length > 0) {
-      hoistOnce(ctx, '_ownHoisted', OWN_HELPERS)
+      useOwnHelper(ctx, '_hall')
       // Read directly: the object type is already established here, and a
       // flag declared for this alone costs more than it saves. The list is
       // built only on that path, which an ordinary object never takes.
-      lines.push(`if(${v}.__proto__!==Object.prototype&&!_hall(${v},${JSON.stringify(typed)}))return false`)
+      lines.push(`if(!${protoIs(ctx, v)}&&!_hall(${v},${JSON.stringify(typed)}))return false`)
     }
   } else if (schema.required && schema.required.length > 0) {
     const checks = schema.required.map(key => `!${ownKeyExpr(ctx, v, key)}`)
@@ -4906,6 +4952,21 @@ function genCodeCNode(schema, v, pathExpr, lines, ctx, schemaPrefix) {
       const allowed = propKeys.map(k => JSON.stringify(k)).join(',')
       body = `const _a${ci}=new Set([${allowed}]);let _x${ci}=0;for(const _f${ci} in ${v}){if(!_a${ci}.has(_f${ci})){_x${ci}=1;break}}if(_x${ci}){${detail(`!_a${ci}.has(_k${ci}[_i])`)}}`
     }
+    // When every declared property is required, a clean object has exactly the
+    // declared keys: if the enumerated count equals the declared count and
+    // every declared name is there, the enumerated set is the declared set and
+    // nothing is extra. That is the verdict generator's count, and it skips
+    // comparing each key against every name, which kept this function over
+    // twice the verdict's cost on an accepted document. Anything else, a
+    // different count or a missing name, falls through to the scan, which
+    // names the extra keys. A name Object.prototype carries answers `in`
+    // through the prototype without being enumerated, so those stay on the
+    // scan.
+    const req = new Set(Array.isArray(schema.required) ? schema.required : [])
+    if (propKeys.length > 0 && propKeys.every((k) => req.has(k) && !PROTO_NAMES.has(k))) {
+      const present = propKeys.map((k) => `${JSON.stringify(k)} in ${v}`).join('&&')
+      body = `let _n${ci}=0;for(const _f${ci} in ${v})_n${ci}++;if(_n${ci}!==${propKeys.length}||!(${present})){${body}}`
+    }
     lines.push(isObj
       ? `{${body}}`
       : `if(typeof ${v}==='object'&&${v}!==null&&!Array.isArray(${v})){${body}}`)

package/lib/tier0.js

@@ -46,6 +46,8 @@ const F_MULT = 16;
 // itself; see ownKeyExpr in js-compiler.js.
 const PROTO_NAMES = new Set([...Object.getOwnPropertyNames(Object.prototype), '__proto__']);
 const _hop = Object.prototype.hasOwnProperty;
+// Deno removes the __proto__ accessor; read the prototype another way there.
+const _PN = ({}).__proto__ === Object.prototype;
 
 function primConstraint(key, propSchema) {
   const t = propSchema.type;
@@ -169,7 +171,7 @@ function tier0ValidateObject(plan, data) {
     let v = data[c.key];
     // Presence is an own-property question: a value the object inherits is
     // treated as absent, as the interpreted engine treats it.
-    if (v !== undefined && (c.protoName || data.__proto__ !== Object.prototype) && !_hop.call(data, c.key)) v = undefined;
+    if (v !== undefined && (c.protoName || (_PN ? data.__proto__ : Object.getPrototypeOf(data)) !== Object.prototype) && !_hop.call(data, c.key)) v = undefined;
     if (v === undefined) {
       if (reqMask & (1 << i)) return false;
       continue;

package/lib/version.js

@@ -7,4 +7,4 @@
 //
 // Kept in lockstep with package.json by `tests/test_version_sync.js`.
 
-module.exports = '1.32.0';
+module.exports = '1.32.2';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ata-validator",
-  "version": "1.32.0",
+  "version": "1.32.2",
   "description": "JSON Schema validation that compiles for speed and still runs where code generation is blocked. Compiled and interpreted engines answer identically at 100% of the official suite. TypeScript inference, Standard Schema V1, and a build step that emits dependency-free modules.",
   "main": "index.js",
   "module": "index.mjs",
@@ -51,7 +51,7 @@
     "release:check": "node scripts/regen-safe-regex-source.js && node tests/test_pack_purity.js && node scripts/check-doc-coverage.js && node tests/test_error_codes_lock.js && node tests/test_safe_regex_source_sync.js && node tests/test_version_sync.js",
     "build": "cmake-js build --target ata",
     "rebuild": "cmake-js rebuild --target ata",
-    "test": "node test.js && node tests/test_removed_aot_methods.js && node tests/test_no_native.js && node tests/test_no_eval.js && node tests/test_property_dependencies.js && node tests/test_v1_dialect.js && node tests/test_buffer_path_parity.js && node tests/test_buffer_gate.js && node tests/test_scanner_differential.js && node tests/test_validate_json_scanner_cost.js && node tests/test_buffer_reject_cost.js && node tests/test_nan_verdict.js && node tests/test_remove_additional_nested.js && node tests/test_exclusive_bounds.js && node tests/test_engine_differential.js && node tests/test_error_shape_differential.js && node tests/test_output_format.js && node tests/test_retry_message.js && node tests/test_describe_schema.js && node tests/test_aot_parse.js && node tests/test_draft7_semantics.js && node tests/test_metaschema_ref.js && node tests/test_pure_js_unsupported.js && node tests/test_native_load_order.js && node tests/test_pack_purity.js && node tests/test_make_native_package.js && node tests/test_browser_nofs.js && node tests/test_browser_imports_guard.js && node tests/test_version_sync.js && node tests/test_native_loaded.js && node tests/test_safe_regex_source_sync.js && node tests/test_t_builder.js && node tests/test_async_refine.js && node tests/test_safe_regex.js && node tests/test_safe_regex_integration.js && node tests/test_aot_build.js && node tests/test_aot_differential.js && node tests/test_aot_cli_build.js && node tests/test_aot_cli_smoke.js && node tests/test_bundle_standalone.js && node tests/test_standalone_anyof.js && node tests/test_standalone_formats.js && node tests/test_aot_format_mode.js && node tests/test_aot_additional_props_errors.js && node tests/test_id_anchor_refs.js && node tests/test_engine_routing.js && node tests/test_engine_option.js && node tests/test_compile_cache_order.js && node tests/test_engine_diagnostic.js && node tests/test_format_engine_parity.js && node tests/test_error_accumulator_collision.js && node tests/test_uri_helper_parity.js && node tests/test_uri_fast_path.js && node tests/test_extend_verdict.js && node tests/test_ipv4_regex.js && node tests/test_ipv6_fast_path.js && node tests/test_nested_recursion_decline.js && node tests/test_generator_error_content.js && node tests/test_inherited_key_presence.js && node tests/test_plan_source.js && node tests/test_fused_remove_additional.js && node tests/test_runtime_parse.js && node tests/test_formats_single_pass.js && node tests/test_email_format_cost.js && node tests/test_format_single_error.js && node tests/test_defs_pointer_alias.js && node tests/test_cross_doc_root_ref.js && node tests/test_codegen_entrypoint_agreement.js && node tests/test_hybrid_agreement.js && node tests/test_codegen_edge_shapes.js && node tests/test_deferred_def_scope.js && node tests/test_node_scoped_ctx_flags.js && node tests/test_fast_slot_exhaustion.js && node tests/test_ajv_errors.js && node tests/test_custom_keywords.js && node tests/test_strict_schema.js && node tests/test_aot_external_checks.js && node tests/test_ajv_parity.js && node tests/test_user_format_error_path.js && node tests/test_unevaluated_error_path.js && node tests/test_unevaluated_error_shape.js && node tests/test_pattern_properties_errors.js && node tests/test_additional_properties_scaling.js && node tests/test_additional_props_combined_cost.js && node tests/test_no_input_mutation.js && node tests/test_typed_validator_runner.js && node tests/test_define_schema.js && node tests/test_error_codes_lock.js && node tests/test_error_code_lookup.js && node tests/test_error_order.js && node tests/test_error_order_ordinal.js && node tests/test_rejection_shape.js && node tests/test_lazy_normalization.js && node tests/test_value_equality.js && node tests/test_vocabulary.js && node tests/test_schema_scan.js && node tests/test_lazy_errors.js && node tests/test_single_pass_errors.js && node tests/test_lazy_json_errors.js && node tests/test_lazy_instance.js && node tests/test_cyclic_input.js && node tests/test_native_error_codes.js && node tests/test_verdict_preprocess.js && node tests/test_defaults_own_keys.js && node tests/test_plan_compiler.js && node tests/test_nullable.js && node tests/test_validate_and_parse.js && node tests/test_validate_data.js && node tests/test_enrich_error.js && node tests/test_enrich_received.js && node tests/test_rich_errors_optout.js && node tests/test_error_messages.js && node tests/test_source_positions.js && node tests/fuzz_positions.js && node tests/test_malformed_json_termination.js && node tests/test_data_positions.js && node tests/test_targeted_positions.js && node tests/test_position_map_cost.js && node tests/test_targeted_positions_cost.js && node tests/test_aot_staleness.js && node tests/test_file_positions.js && node tests/test_aot_positions_cost.js && node tests/test_schema_hash.js && node tests/test_render_shared.js && node tests/test_renderers.js && node tests/test_additive_fields.js && node tests/test_diagnostic_source.js && node tests/test_diagnose.js && node tests/test_correlate.js && node tests/test_diagnostics_score.js && node tests/test_runtime_error_dx.js && node tests/test_aot_error_dx.js && node tests/test_abort_early.js && node tests/test_branch_collapse.js && node tests/test_suggestions.js && node tests/test_cli_validate.js && node tests/test_cli_version.js && node benchmark/bench_aot_size.mjs",
+    "test": "node test.js && node tests/test_removed_aot_methods.js && node tests/test_no_native.js && node tests/test_no_eval.js && node tests/test_property_dependencies.js && node tests/test_v1_dialect.js && node tests/test_buffer_path_parity.js && node tests/test_buffer_gate.js && node tests/test_scanner_differential.js && node tests/test_validate_json_scanner_cost.js && node tests/test_buffer_reject_cost.js && node tests/test_nan_verdict.js && node tests/test_remove_additional_nested.js && node tests/test_exclusive_bounds.js && node tests/test_engine_differential.js && node tests/test_error_shape_differential.js && node tests/test_output_format.js && node tests/test_retry_message.js && node tests/test_describe_schema.js && node tests/test_aot_parse.js && node tests/test_draft7_semantics.js && node tests/test_metaschema_ref.js && node tests/test_pure_js_unsupported.js && node tests/test_native_load_order.js && node tests/test_pack_purity.js && node tests/test_make_native_package.js && node tests/test_browser_nofs.js && node tests/test_browser_imports_guard.js && node tests/test_version_sync.js && node tests/test_native_loaded.js && node tests/test_safe_regex_source_sync.js && node tests/test_t_builder.js && node tests/test_async_refine.js && node tests/test_safe_regex.js && node tests/test_safe_regex_integration.js && node tests/test_aot_build.js && node tests/test_aot_differential.js && node tests/test_aot_cli_build.js && node tests/test_aot_cli_smoke.js && node tests/test_bundle_standalone.js && node tests/test_standalone_anyof.js && node tests/test_standalone_formats.js && node tests/test_aot_format_mode.js && node tests/test_aot_additional_props_errors.js && node tests/test_id_anchor_refs.js && node tests/test_engine_routing.js && node tests/test_engine_option.js && node tests/test_compile_cache_order.js && node tests/test_engine_diagnostic.js && node tests/test_format_engine_parity.js && node tests/test_error_accumulator_collision.js && node tests/test_uri_helper_parity.js && node tests/test_uri_fast_path.js && node tests/test_extend_verdict.js && node tests/test_ipv4_regex.js && node tests/test_ipv6_fast_path.js && node tests/test_nested_recursion_decline.js && node tests/test_generator_error_content.js && node tests/test_inherited_key_presence.js && node tests/test_proto_accessor.js && node tests/test_hybrid_tier.js && node tests/test_plan_source.js && node tests/test_fused_remove_additional.js && node tests/test_runtime_parse.js && node tests/test_formats_single_pass.js && node tests/test_email_format_cost.js && node tests/test_format_single_error.js && node tests/test_defs_pointer_alias.js && node tests/test_cross_doc_root_ref.js && node tests/test_codegen_entrypoint_agreement.js && node tests/test_hybrid_agreement.js && node tests/test_codegen_edge_shapes.js && node tests/test_deferred_def_scope.js && node tests/test_node_scoped_ctx_flags.js && node tests/test_fast_slot_exhaustion.js && node tests/test_ajv_errors.js && node tests/test_custom_keywords.js && node tests/test_strict_schema.js && node tests/test_aot_external_checks.js && node tests/test_ajv_parity.js && node tests/test_user_format_error_path.js && node tests/test_unevaluated_error_path.js && node tests/test_unevaluated_error_shape.js && node tests/test_pattern_properties_errors.js && node tests/test_additional_properties_scaling.js && node tests/test_additional_props_combined_cost.js && node tests/test_no_input_mutation.js && node tests/test_typed_validator_runner.js && node tests/test_define_schema.js && node tests/test_error_codes_lock.js && node tests/test_error_code_lookup.js && node tests/test_error_order.js && node tests/test_error_order_ordinal.js && node tests/test_rejection_shape.js && node tests/test_lazy_normalization.js && node tests/test_value_equality.js && node tests/test_vocabulary.js && node tests/test_schema_scan.js && node tests/test_lazy_errors.js && node tests/test_single_pass_errors.js && node tests/test_lazy_json_errors.js && node tests/test_lazy_instance.js && node tests/test_cyclic_input.js && node tests/test_native_error_codes.js && node tests/test_verdict_preprocess.js && node tests/test_defaults_own_keys.js && node tests/test_plan_compiler.js && node tests/test_nullable.js && node tests/test_validate_and_parse.js && node tests/test_validate_data.js && node tests/test_enrich_error.js && node tests/test_enrich_received.js && node tests/test_rich_errors_optout.js && node tests/test_error_messages.js && node tests/test_source_positions.js && node tests/fuzz_positions.js && node tests/test_malformed_json_termination.js && node tests/test_data_positions.js && node tests/test_targeted_positions.js && node tests/test_position_map_cost.js && node tests/test_targeted_positions_cost.js && node tests/test_aot_staleness.js && node tests/test_file_positions.js && node tests/test_aot_positions_cost.js && node tests/test_schema_hash.js && node tests/test_render_shared.js && node tests/test_renderers.js && node tests/test_additive_fields.js && node tests/test_diagnostic_source.js && node tests/test_diagnose.js && node tests/test_correlate.js && node tests/test_diagnostics_score.js && node tests/test_runtime_error_dx.js && node tests/test_aot_error_dx.js && node tests/test_abort_early.js && node tests/test_branch_collapse.js && node tests/test_suggestions.js && node tests/test_cli_validate.js && node tests/test_cli_version.js && node benchmark/bench_aot_size.mjs",
     "bench:size": "node benchmark/bench_aot_size.mjs",
     "test:suite": "node tests/run_suite.js && node tests/run_suite.js draft7 && node tests/run_suite.js v1",
     "test:compat": "node tests/test_compat.js",
@@ -121,13 +121,13 @@
     "LICENSE"
   ],
   "optionalDependencies": {
-    "@ata-validator/native-darwin-arm64": "1.32.0",
-    "@ata-validator/native-darwin-x64": "1.32.0",
-    "@ata-validator/native-linux-arm64-gnu": "1.32.0",
-    "@ata-validator/native-linux-arm64-musl": "1.32.0",
-    "@ata-validator/native-linux-x64-gnu": "1.32.0",
-    "@ata-validator/native-linux-x64-musl": "1.32.0",
-    "@ata-validator/native-win32-x64": "1.32.0"
+    "@ata-validator/native-darwin-arm64": "1.32.2",
+    "@ata-validator/native-darwin-x64": "1.32.2",
+    "@ata-validator/native-linux-arm64-gnu": "1.32.2",
+    "@ata-validator/native-linux-arm64-musl": "1.32.2",
+    "@ata-validator/native-linux-x64-gnu": "1.32.2",
+    "@ata-validator/native-linux-x64-musl": "1.32.2",
+    "@ata-validator/native-win32-x64": "1.32.2"
   },
   "peerDependencies": {
     "yaml": "^2.0.0"