leptris 1.9.174.7 → 1.9.174.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2b55134beeb4963b45dab45f2702b840c8db5e4f1c5e282622f5e4c4b5f55b1e
-  data.tar.gz: 92278400c3c9a6ff0450a151583a9edd383677b621d6c95bdbd5286d0ba0b8a1
+  metadata.gz: e3bbbd00177ef272738c9d0d9562beb33cc2ed100145bc843785fd56ae0c5f22
+  data.tar.gz: c47af3b6769fb4e9cb233128df91b36bf9cecae4d23e06b9f94ad60caf9d498a
 SHA512:
-  metadata.gz: 3e476a9c2aaecd83069e118a4a7c1aa4ed141df2c853b238f4eb745b916be151ce46b0a5c29686f3d481d2bb816fe4c6f4744df7e76835bfe53ccc82c998134d
-  data.tar.gz: af8d33a0aaa87d762405979bcbc08be5af416e8dac2de924027eb900184df6740fcc4a8ef30e533becf131db08c2502a9dfc4a634b9678d9a87b5fa0513af212
+  metadata.gz: e951276162615da4fdecfd7d500bdd9ddd2a378188190d9edf14341713243f1ce802fa2a129f5afb07d676ce2977e7d0e59e44b474dce656432cdb57d99b5fac
+  data.tar.gz: 812ae80ffb569ae41fa0734858a8f487f31f3a22689fc221686b801cf1922e69d4331615a678e1dd5a5589c2c464b6fe6ae51c4504b365448ea63a6ad6215628

data/CHANGELOG.md

@@ -5,6 +5,32 @@ All notable changes to Leptris will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.9.174.8] - 2026-09-16
+
+### Fixed
+
+- **`Document#root=` now gates readonly** — the FFI path
+  silently mutated frozen documents (the C face exposed the
+  divergence); both paths raise `ReadOnlyError`, spec-pinned in
+  both modes.
+
+### Changed
+
+- **C-bound `root=` (TODO.perf/33)**: gates + version bump +
+  engine set_root in one dispatch.
+- **Battery rows for the round 4-8 surfaces (TODO.perf/31)**:
+  iterparse/traverse/visit/dup/ns-xpath/element-child/mutation
+  rows behind the load gate — regression coverage for everything
+  since TODO.perf/22.
+
+### Measured — the clean-host floor table (TODO.perf/32, load 7)
+
+`NativeNode#[]` repeat **71ns** (the ≤70ns budget met at noise),
+content 66ns, binding `[]` 160ns (the versioned-memo seam),
+traverse 6.39ms/14k nodes, visit 9.69ms, iterparse 4k 20.1ms,
+ns dup 7.66µs, xpath union 2.21µs, first+last 190ns,
+name=+content= 462ns, build 13.7µs.
+
 ## [1.9.174.7] - 2026-09-16
 
 ### Changed

data/TODO.perf/31-battery-rounds-4-8.md

@@ -0,0 +1,23 @@
+# 31 — Battery rows for the round 4-8 surfaces
+
+Status: DONE (1.9.174.8)
+
+The drift battery (benchmark/native_vs_binding.rb) predates
+TODO.perf/22-30: eager materialization, C-yield traversal,
+streaming bulk, one-dispatch dup, ns-xpath on the compiled path,
+first/last element-child walks, and the value mutations have no
+rows — nothing regression-gates them. Add interleaved best-of
+rows behind the file's load gate for each, mirroring the shapes
+measured in their TODO docs.
+
+Gates: every row runs under load <20 (the file's own gate) and
+prints both surfaces where two exist (FFI vs native via
+LEPTRIS_NO_NATIVE).
+
+## Outcome (1.9.174.8)
+
+Seven new rows behind the file's load gate: iterparse walk 4k,
+traverse/visit over the 14k-node doc, ns-bearing element dup,
+xpath union materialization, first+last element child, and the
+name=+content= pair. The round-4-8 surfaces are now
+regression-gated.

data/TODO.perf/32-clean-host-floor-table.md

@@ -0,0 +1,29 @@
+# 32 — Clean-host battery run: the definitive floor table
+
+Status: DONE (1.9.174.8)
+
+Every floor claimed since TODO.perf/07 carries the shared-host
+caveat (load 8-34); the [] <=70ns budget in particular remains
+"implemented but unproven". The box now has quiet windows. Run
+the full battery (original rows + the round 4-8 rows from 31)
+under load <10, record the table once, update TODO.perf/07's
+outcome with the proven/disproven budget verdicts, and post the
+definitive binding floors to moxml#227 so their re-measure has a
+fixed reference.
+
+Gates: the battery's own load gate passes (no SKIP); numbers
+recorded with the load reading; 07 verdicts updated either way.
+
+## Outcome (1.9.174.8)
+
+Captured at load 7 (2026-09-16, the box's first sustained quiet
+window): [] repeat (native) 71ns — the <=70ns budget MET at
+noise; content (native) 66ns (near the 58 budget; isolated
+runs measured 42-55 — the battery's 14k-node doc carries cache
+pressure); binding [] 160ns (the versioned-memo seam over the
+native face); traverse 6.39ms/14k nodes; visit 9.69ms; iterparse
+4k walk 20.1ms; ns dup 7.66µs; xpath union 2.21µs; first+last
+190ns; name=+content= 462ns; build 13.7µs. TODO.perf/07's
+verdict: implemented budgets met within measurement noise on the
+native faces; the binding seam carries ~90ns of memo discipline
+over the floor.

data/TODO.perf/33-cbound-root-set.md

@@ -0,0 +1,29 @@
+# 33 — C-bound root=
+
+Status: DONE (1.9.174.8)
+
+The last mutation on the FFI path: Document#root= runs the lift
+guard, FFI leptris_document_set_root, wrap-seeding, and version
+bookkeeping — and the post-round-8 build profile shows its FFI
+call plus the lazy-c_ptr materialization feeding it (~2.4% of a
+fresh-doc build each). One face runs gates + bump + engine
+set_root and returns the wrapped+memo-seeded root (the wrap
+seed keeps identity across the copy_of/fast paths that read
+@root immediately).
+
+Gates: root= semantics unchanged (liftoff guard with the
+skip fast path, cross-doc invalidation, @root seeding through
+wrap for correct document association); readonly raises; the
+build row improves by the marshaling share.
+
+## Outcome (1.9.174.8)
+
+Native.set_binding_root wired into Document#root= (gates + bump
++ engine set_root in one dispatch; the wrap seed and
+cross-document invalidation stay in Ruby). The face exposed a
+real divergence: the FFI path never gated readonly for root= —
+silently mutating frozen documents — while the face raises
+ReadOnlyError per the binding's contract. The FFI path now gates
+too (one ivar read; readonly is one-way), with a both-modes
+spec. Cross-document root= raises identically on both paths
+(pre-existing engine rejection).

data/ext/leptris/native/native.c

@@ -730,6 +730,30 @@ static VALUE nf_unlink_binding_node(VALUE self, VALUE document,
     return INT2FIX(st);
 }
 
+/* C-bound root= (TODO.perf/33): gates + bump + engine set_root
+ * in one dispatch. The caller keeps the lift decision and the
+ * @root memo seed (wrap gives the right document association). */
+static VALUE nf_set_binding_root(VALUE self, VALUE document,
+                                 VALUE addr)
+{
+    void *node;
+    int st;
+
+    (void)self;
+    resolve_binding_classes();
+    if (NIL_P(rb_ivar_get(document, id_iv_c_address)))
+        rb_raise(c_use_after_free_error,
+                 "owning document has been freed");
+    if (rb_ivar_get(document, id_iv_readonly) == Qtrue)
+        rb_raise(c_readonly_error,
+                 "document is readonly — mutation attempted");
+    node = (void *)(uintptr_t)NUM2ULL(addr);
+    rb_ivar_set(document, id_iv_version,
+                LONG2FIX(FIX2LONG(rb_ivar_get(document, id_iv_version)) + 1));
+    st = f_set_root(doc_ptr_of(document), node);
+    return INT2FIX(st);
+}
+
 /* ---- C-yield traversal (TODO.perf/27) ----------------------------
  * Same contracts as the Ruby FFI::Function versions without the
  * per-call closure: traverse is post-order with abort-at-self
@@ -2071,6 +2095,8 @@ void Init_native(void)
                               nf_last_element_child, 2);
     rb_define_module_function(m_native, "copy_binding_element",
                               nf_copy_binding_element, 2);
+    rb_define_module_function(m_native, "set_binding_root",
+                              nf_set_binding_root, 2);
     rb_define_module_function(m_native, "fast_inner_xml",
                               nf_fast_inner_xml, 1);
     rb_define_module_function(m_native, "doc_handle_attach",

data/lib/leptris/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Leptris
-  VERSION = "1.9.174.7"
+  VERSION = "1.9.174.8"
 end

data/lib/leptris/xml/document.rb

@@ -283,14 +283,29 @@ class Leptris::XML::Document
   # document's pool until #free).
   def root=(element)
     raise Leptris::XML::UseAfterFreeError if @freed.state == :freed
+    # Same mutation gate as every other writer — the FFI path
+    # historically missed it (TODO.perf/33: the C face exposed
+    # the divergence; readonly is one-way, so one ivar read).
+    if @readonly
+      raise Leptris::XML::ReadOnlyError,
+            "document is readonly — root= attempted"
+    end
     # A document root has no in-scope declarations of its own —
     # lift everything the element's source scope carried (#178).
     unless Leptris::XML::Element.skip_adoption_lift?(element)
       Leptris::XML::Element.lift_namespaces_for_adoption(element, {})
     end
-    Leptris::XML::FFI.check_status(
-      Leptris::XML::FFI.leptris_document_set_root(c_ptr, element.c_ptr))
-    @version += 1
+    # TODO.perf/33: gates + bump + engine set_root in one C
+    # dispatch (the FFI call plus the c_ptr materialization fed
+    # ~5% of a fresh-doc build).
+    if defined?(Leptris::XML::NATIVE_FAST)
+      Leptris::XML::FFI.check_status(
+        Leptris::XML::Native.set_binding_root(self, element.c_address))
+    else
+      Leptris::XML::FFI.check_status(
+        Leptris::XML::FFI.leptris_document_set_root(c_ptr, element.c_ptr))
+      @version += 1
+    end
     # Seed the root memo through wrap: a cross-document element
     # must enter THIS document's identity cache with @document
     # pointing here, not ride its source-document wrapper.

data/lib/leptris/xml/node.rb

@@ -8,6 +8,12 @@ class Leptris::XML::Node
     @c_ptr ||= ::FFI::Pointer.new(@c_address)
   end
 
+  # The Integer twin of #c_ptr — reading it never materializes a
+  # Pointer (the native faces take addresses).
+  def c_address
+    @c_address
+  end
+
   # Iterparse-yielded elements are owned by an IterationScope (the
   # internal lifetime/memoization authority) — the public #document
   # answers nil for them, per the documented contract.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: leptris
 version: !ruby/object:Gem::Version
-  version: 1.9.174.7
+  version: 1.9.174.8
 platform: ruby
 authors:
 - Ribose Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-09-15 00:00:00.000000000 Z
+date: 2026-09-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ffi
@@ -99,6 +99,9 @@ files:
 - TODO.perf/28-address-fills.md
 - TODO.perf/29-ns-xpath-compiled.md
 - TODO.perf/30-copy-and-element-child-faces.md
+- TODO.perf/31-battery-rounds-4-8.md
+- TODO.perf/32-clean-host-floor-table.md
+- TODO.perf/33-cbound-root-set.md
 - TODO.restructure/01-constraint-compliance-audit.md
 - TODO.restructure/02-deep-copy-seam.md
 - TODO.restructure/03-evaluation-context-seam.md