canon 0.3.69 → 0.3.71

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4f23fa758538acdbe352d58250d880b04e905191ce3c44b30528580cee06f224
-  data.tar.gz: c33b27f2839764f6d91fded3b3d7cb2042dc7e91d1d7a630037bcda0ce645c37
+  metadata.gz: 958eeca178b78a0f3de23eb6ab23674aacb3fee50c6671da8911b1225431278f
+  data.tar.gz: e9d9cee428547b4117a7b15e335f9b31ae0c76bb9120c76b0f362e5a499dfde8
 SHA512:
-  metadata.gz: 6137233af91995ea5956d35fa154d2c206557e30c7fd9d1ced455667560f05810a034c4a1c407e4635fdbaefe8ad9929ad5b28cdf4cf5118990d83865611c4a3
-  data.tar.gz: 16a631574442c56fc87e5a48851643630ba9342d7e06f4b0b938f28a24792d5b414884099ec7c767fedb067971cc6ab82cf48871d55a1d1551f9cc5d7886e868
+  metadata.gz: 17f11eed81fe5f50ef94ca58ea8ce3932281b0b478a8143439c148e15fd4519abe0d754e9a14d23b294f366523668c97ac21d96418190fbc7c65e3a86373b77a
+  data.tar.gz: 7a3cf3fb1b732e84a7167a7f184cd2085afa43023829f77021e91197c40c4e8d9f9910847ca18d641d144c3c7aecb55cea5657441e726f95833210f333bbc705

data/docs/features/environment-configuration/index.adoc

@@ -342,6 +342,17 @@ puts "Defaults: #{resolver.defaults.inspect}"
 puts "Source of algorithm: #{resolver.source_for(:algorithm)}"
 ----
 
+=== Engine digests: LEPTRIS_DIGEST_ATTR_ORDER
+
+Canon's XML digest gate reads one *engine-level* variable that belongs to
+libleptris, not to canon. Canon never sets it — the host decides:
+
+`LEPTRIS_DIGEST_ATTR_ORDER=1`:: Makes attribute order identity-bearing in
+libleptris' structural digests. Canon detects this and skips the SAX
+signature probe in verbose diff reports — attribute-order identity is then
+proven by the digest itself. Digest *values* change process-wide, so enable
+it only if nothing in your process persists leptris digests across restarts.
+
 == See also
 
 * link:size-limits/[Size Limits] - File size and node count limits

data/lib/canon/comparison/xml_comparator.rb

@@ -202,16 +202,14 @@ module Canon
         def verbose_report_proven_empty?(n1, n2, opts)
           return true unless opts[:verbose]
 
-          # Identical input parses identically — differences and
-          # attribute order coincide by construction. Recover errors
-          # ride the fingerprint's diag check when the engine exposes
-          # them (libleptris 1.9.205+, #1200); otherwise the one SAX
-          # scan covers the parse-error banner (issue #130).
-          if n1 == n2
-            return true if Xml::DigestGate.recover_diags_available?
-
-            return !Xml::Sax.probe(n1).saw_error?
-          end
+          # Identical input parses identically, and certify has
+          # already declined any recover-error document through the
+          # wrapper's parse_diagnostics — the banner cannot be lost.
+          return true if n1 == n2
+          # With order-sensitive digests (host-set flag), attribute
+          # order is digest-proven as well — the signature probe has
+          # nothing left to answer.
+          return true if Xml::DigestGate.attr_order_digest?
 
           left = Xml::Sax.probe(n1)
           return false if left.saw_error?

data/lib/canon/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Canon
-  VERSION = "0.3.69"
+  VERSION = "0.3.71"
 end

data/lib/canon/xml/digest_gate.rb

@@ -21,26 +21,24 @@ module Canon
     module DigestGate
       module_function
 
-      # libleptris 1.9.205+ records duplicate-attribute recover
-      # events on the parsed document (#1200): read through the
-      # FFI diag counter. Evaluated lazily at call time — a load-time
-      # constant would freeze before leptris loads (defined? never
-      # resolves pending autoloads). When the adapter is not leptris
-      # (or the binding predates the surface), the verbose lane
-      # falls back to the SAX probe for its error scan.
-      def recover_diags_available?
-        defined?(::Leptris::XML::FFI) &&
-          ::Leptris::XML::FFI.respond_to?(:leptris_document_parse_diag_count)
-      rescue StandardError
-        false
-      end
-
+      # moxml 0.5.76+ (moxml#271) surfaces the engine's recover
+      # diagnostics — duplicate-attribute events and the like (#1200)
+      # — as Document#parse_diagnostics. The direct-leptris-FFI
+      # reach-in this replaced was the gate's one documented seam
+      # exception; the wrapper ends it.
       def recover_diags?(doc)
-        return false unless recover_diags_available?
+        !doc.parse_diagnostics.empty?
+      end
 
-        native = doc.native
-        native = native.c_ptr if native.respond_to?(:c_ptr)
-        ::Leptris::XML::FFI.leptris_document_parse_diag_count(native).positive?
+      # Whether the HOST opted into attribute-order-sensitive digests
+      # (libleptris 1.9.228 honors LEPTRIS_DIGEST_ATTR_ORDER per
+      # digest call; leptris#1297). Canon reads the env — never
+      # writes it: the flag re-spaces digest values process-wide, so
+      # enabling it is the host's call, not a library's. When set,
+      # digest equality proves attribute-order identity too, and the
+      # verbose lane's signature probe becomes redundant.
+      def attr_order_digest?
+        ENV["LEPTRIS_DIGEST_ATTR_ORDER"] == "1"
       end
 
       def available?

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: canon
 version: !ruby/object:Gem::Version
-  version: 0.3.69
+  version: 0.3.71
 platform: ruby
 authors:
 - Ribose Inc.
@@ -44,28 +44,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.9.222
+        version: 1.9.228
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.9.222
+        version: 1.9.228
 - !ruby/object:Gem::Dependency
   name: moxml
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.5.73
+        version: 0.5.78
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.5.73
+        version: 0.5.78
 - !ruby/object:Gem::Dependency
   name: paint
   requirement: !ruby/object:Gem::Requirement