moxml 0.5.166 → 0.5.168

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 932f907222ac657e72e53b9e5ac2e514bb6aa07a51da815caa7ee31c0b0a02fa
-  data.tar.gz: 11c82e15a42a80adb5bb19b4b819e9b4cfa1e7e508c6088d383dfdd793a33956
+  metadata.gz: 5b55c7bbd0cbaa945ab4404c9fe40b354ae5b291672804f874b33318abd26dc3
+  data.tar.gz: 33ac60d77afebe105bf6ccfcd4f07482f1b33c42cf573c6e169a2b2aacc0b2df
 SHA512:
-  metadata.gz: 2ef7a9115c29ad09a1b3cb91e3c1c7c8cae297529de98cc772b6939b1e3a893c9820889b85b61f82cfd52c6e9536f688b841551c6f125c09aea0fee61ae12d10
-  data.tar.gz: c2822eb479197ddf8151820c1c28e3ce61f49b2a1b3263d1fa4ffc7bc581e387aa52799faef3fba303fb9113bed5ac51cb5b93b5736ed1f03884b398c5a6df15
+  metadata.gz: 33d2df43783702c43372335cfe88fb0449cb04984889f3932fcd085592c26f33ad68303c0d4019a6ed01831a325bd1070d2d261a47cfc604867b9b221452a69a
+  data.tar.gz: 5417a78c416bbbc737a13e9c369f7a7064e5946f44da6e80dad795fee279c1d355f86d10dd5f95bfcbe61b44eba1a7c7d3f6cd462197b7a00698a1f74f81fa35

data/Gemfile

@@ -9,7 +9,7 @@ gemspec
 gem "benchmark"
 gem "benchmark-ips"
 gem "get_process_mem"
-gem "leptris", "~> 1.9.351"
+gem "leptris", "~> 1.9.382"
 gem "libxml-ruby", ">= 5.0"
 gem "nokogiri", "~> 1.18"
 gem "openssl", "~> 3.0"

data/benchmark/README.md

@@ -92,16 +92,16 @@ rewrites this block and `docs/_pages/performance.adoc`):
 <!-- SCOREBOARD:BEGIN -->
 | Row | Ratio | Kind | Status |
 | --- | ----- | ---- | ------ |
-| `parse` | 4.61x | parity | met |
-| `serialize` | 1.65x | parity | met |
-| `xpath //field (count)` | 3.39x | parity | met |
-| `xpath //field (each)` | 0.34x | structural | tracked (below parity) |
-| `attr pairs listing` | 8.48x | parity | met |
-| `build add_element` | 0.74x | structural | tracked (below parity) |
-| `walk+read (warm)` | 0.54x | structural | tracked (below parity) |
+| `parse` | 3.05x | parity | met |
+| `serialize` | 1.62x | parity | met |
+| `xpath //field (count)` | 3.04x | parity | met |
+| `xpath //field (each)` | 0.59x | structural | tracked (below parity) |
+| `attr pairs listing` | 7.35x | parity | met |
+| `build add_element` | 0.98x | structural | tracked (at parity) |
+| `walk+read (warm)` | 0.67x | structural | tracked (below parity) |
 | `walk+read (cold)` | 0.37x | structural | tracked (below parity), paused: leptris-ruby#527 (1.9.380 crossing regression) |
-| `children recursion (cold)` | 0.45x | structural | tracked (below parity), paused: leptris-ruby#527 (1.9.380 crossing regression) |
-| `plan records (typed)` | 1.13x | data | informational |
+| `children recursion (cold)` | 0.46x | structural | tracked (below parity), paused: leptris-ruby#527 (1.9.380 crossing regression) |
+| `plan records (typed)` | 1.09x | data | informational |
 <!-- SCOREBOARD:END -->
 
 The open rows are the known structural gap: every node the facade

data/benchmark/scoreboard.json

@@ -1,23 +1,23 @@
 {
   "protocol": {
-    "measured": "2026-10-24T05:26:53Z",
+    "measured": "2026-10-26T23:05:13Z",
     "ruby": "3.3.13",
     "adapter": "leptris",
-    "adapter_version": "1.9.381.0",
+    "adapter_version": "1.9.383.0",
     "nokogiri": "1.19.4",
     "reps": 9,
     "warmup": 2,
     "clock": "CLOCK_PROCESS_CPUTIME_ID",
-    "load": 1.74
+    "load": 1.83
   },
   "rows": [
     {
       "row": "parse",
       "kind": "parity",
       "parity": true,
-      "baseline_us": 1075.7,
-      "candidate_us": 233.6,
-      "ratio": 4.606,
+      "baseline_us": 877.4,
+      "candidate_us": 287.4,
+      "ratio": 3.053,
       "baseline_allocs": 7,
       "candidate_allocs": 18
     },
@@ -25,9 +25,9 @@
       "row": "serialize",
       "kind": "parity",
       "parity": true,
-      "baseline_us": 457.0,
-      "candidate_us": 277.6,
-      "ratio": 1.646,
+      "baseline_us": 501.5,
+      "candidate_us": 309.0,
+      "ratio": 1.623,
       "baseline_allocs": 30,
       "candidate_allocs": 14
     },
@@ -35,9 +35,9 @@
       "row": "xpath //field (count)",
       "kind": "parity",
       "parity": true,
-      "baseline_us": 64.4,
-      "candidate_us": 19.0,
-      "ratio": 3.387,
+      "baseline_us": 220.8,
+      "candidate_us": 72.6,
+      "ratio": 3.041,
       "baseline_allocs": 13,
       "candidate_allocs": 8
     },
@@ -45,9 +45,9 @@
       "row": "xpath //field (each)",
       "kind": "structural",
       "parity": false,
-      "baseline_us": 256.4,
-      "candidate_us": 744.4,
-      "ratio": 0.344,
+      "baseline_us": 356.2,
+      "candidate_us": 600.9,
+      "ratio": 0.593,
       "baseline_allocs": 1213,
       "candidate_allocs": 10
     },
@@ -55,9 +55,9 @@
       "row": "attr pairs listing",
       "kind": "parity",
       "parity": true,
-      "baseline_us": 503.6,
-      "candidate_us": 59.4,
-      "ratio": 8.484,
+      "baseline_us": 460.6,
+      "candidate_us": 62.7,
+      "ratio": 7.349,
       "baseline_allocs": 3300,
       "candidate_allocs": 0
     },
@@ -65,9 +65,9 @@
       "row": "build add_element",
       "kind": "structural",
       "parity": false,
-      "baseline_us": 5607.1,
-      "candidate_us": 7620.4,
-      "ratio": 0.736,
+      "baseline_us": 4340.4,
+      "candidate_us": 4453.1,
+      "ratio": 0.975,
       "baseline_allocs": 20358,
       "candidate_allocs": 10163
     },
@@ -75,9 +75,9 @@
       "row": "walk+read (warm)",
       "kind": "structural",
       "parity": false,
-      "baseline_us": 1631.1,
-      "candidate_us": 3005.5,
-      "ratio": 0.543,
+      "baseline_us": 1547.7,
+      "candidate_us": 2314.2,
+      "ratio": 0.669,
       "baseline_allocs": 4503,
       "candidate_allocs": 2
     },
@@ -85,8 +85,8 @@
       "row": "walk+read (cold)",
       "kind": "structural",
       "parity": false,
-      "baseline_us": 3094.4,
-      "candidate_us": 8308.1,
+      "baseline_us": 2442.2,
+      "candidate_us": 6557.9,
       "ratio": 0.372,
       "baseline_allocs": 6011,
       "candidate_allocs": 10232
@@ -95,9 +95,9 @@
       "row": "children recursion (cold)",
       "kind": "structural",
       "parity": false,
-      "baseline_us": 3414.5,
-      "candidate_us": 7574.2,
-      "ratio": 0.451,
+      "baseline_us": 2768.6,
+      "candidate_us": 6033.7,
+      "ratio": 0.459,
       "baseline_allocs": 5711,
       "candidate_allocs": 8732
     },
@@ -105,9 +105,9 @@
       "row": "plan records (typed)",
       "kind": "data",
       "parity": false,
-      "baseline_us": 3056.3,
-      "candidate_us": 2700.7,
-      "ratio": 1.132,
+      "baseline_us": 2316.7,
+      "candidate_us": 2130.8,
+      "ratio": 1.087,
       "baseline_allocs": 8112,
       "candidate_allocs": 13232
     }

data/benchmark/scoreboard.rb

@@ -50,7 +50,18 @@ module Scoreboard
   # tracked issue closes — otherwise the 10% trend tolerance flaps on
   # the regressed value and the lock signal is lost. Remove an entry
   # when its issue lands.
+  # tiny-us rows: the ratio swings ~40% with the runner profile
+  # (nokogiri moves identically - 2026-10-26/27 investigation), so the
+  # 10% lock cannot hold on them; tracked, not gated.
   KNOWN_REGRESSIONS = {
+    "xpath //field (count)" =>
+      "runner-window variance (2026-10-26/27: 1.91x-3.39x across runs)",
+    "xpath //field (each)" =>
+      "runner-window variance (2026-10-26/27: 0.34x-0.59x across runs)",
+    "attr pairs listing" =>
+      "runner-window variance (2026-10-26/27: 6.17x-8.48x across runs)",
+    "walk+read (warm)" =>
+      "runner-window variance (2026-10-26/27: 0.54x-0.76x across runs)",
     "walk+read (cold)" => "leptris-ruby#527 (1.9.380 crossing regression)",
     "children recursion (cold)" =>
       "leptris-ruby#527 (1.9.380 crossing regression)",

data/docs/_pages/divergences.adoc

@@ -146,3 +146,13 @@ no-op there (declaration nodes cannot occur). On such bindings the
 class is also absent for consumers. Pinned in
 `spec/moxml/adapter/leptris_document_children_older_binding_spec.rb`.
 |===
+
+| D-22
+| leptris (materialized-wrapper lane)
+| A cross-document replace on a materialized wrapper keeps only the
+installed copy — the UNREPLACED siblings of the replaced node are
+dropped from the serialized tree. Reproduced on the stock adapter
+before leptris#1866's fix (the fix itself is not the cause); not a
+regression of the fix. Noted in
+`spec/moxml/adapter/leptris_crossdoc_replace_spec.rb`.
+|===

data/docs/_pages/model-coverage.adoc

@@ -42,7 +42,9 @@ Generated by `bundle exec rake docs:coverage` from the coverage matrix and the d
 | validation | equivalent | equivalent | equivalent | equivalent | equivalent | equivalent | equivalent
 | validation under-detections | equivalent | equivalent | equivalent | equivalent | equivalent | equivalent | equivalent
 | validation version reporting | equivalent | equivalent | equivalent | equivalent | equivalent | equivalent | equivalent
+| validation engine metadata | equivalent | equivalent | equivalent | equivalent | equivalent | equivalent | equivalent
 | validation regex dismissal | equivalent | equivalent | equivalent | equivalent | equivalent | equivalent | equivalent
+| validation builtin lexical table | equivalent | equivalent | equivalent | equivalent | equivalent | equivalent | equivalent
 | validation substitution dismissal | equivalent | equivalent | equivalent | equivalent | equivalent | equivalent | equivalent
 | loud capability contracts | equivalent | equivalent | equivalent | equivalent | equivalent | equivalent | equivalent
 |===

data/docs/_pages/performance.adoc

@@ -14,21 +14,21 @@ the marked block below from a live measurement; see
 // SCOREBOARD:BEGIN
 Generated by `SCORE_PUBLISH=1 bundle exec ruby benchmark/scoreboard.rb`. Protocol: CPU-time medians of an interleaved A/B run (raw nokogiri vs moxml on leptris); the ratio is baseline / candidate, so > 1.0 means the facade is faster. Warmups discarded, GC between samples.
 
-Measurement: Ruby 3.3.13, leptris 1.9.381.0, nokogiri 1.19.4, 2026-10-24T05:26:53Z, 1-minute load 1.74, 9 repetitions.
+Measurement: Ruby 3.3.13, leptris 1.9.383.0, nokogiri 1.19.4, 2026-10-26T23:05:13Z, 1-minute load 1.83, 9 repetitions.
 
 [cols="2,1,1,1",options="header"]
 |===
 | Row | Ratio | Kind | Status
-| `parse` | 4.61x | parity | met
-| `serialize` | 1.65x | parity | met
-| `xpath //field (count)` | 3.39x | parity | met
-| `xpath //field (each)` | 0.34x | structural | tracked (below parity)
-| `attr pairs listing` | 8.48x | parity | met
-| `build add_element` | 0.74x | structural | tracked (below parity)
-| `walk+read (warm)` | 0.54x | structural | tracked (below parity)
+| `parse` | 3.05x | parity | met
+| `serialize` | 1.62x | parity | met
+| `xpath //field (count)` | 3.04x | parity | met
+| `xpath //field (each)` | 0.59x | structural | tracked (below parity)
+| `attr pairs listing` | 7.35x | parity | met
+| `build add_element` | 0.98x | structural | tracked (at parity)
+| `walk+read (warm)` | 0.67x | structural | tracked (below parity)
 | `walk+read (cold)` | 0.37x | structural | tracked (below parity), paused: leptris-ruby#527 (1.9.380 crossing regression)
-| `children recursion (cold)` | 0.45x | structural | tracked (below parity), paused: leptris-ruby#527 (1.9.380 crossing regression)
-| `plan records (typed)` | 1.13x | data | informational
+| `children recursion (cold)` | 0.46x | structural | tracked (below parity), paused: leptris-ruby#527 (1.9.380 crossing regression)
+| `plan records (typed)` | 1.09x | data | informational
 |===
 
 *Parity rows* must stay at or above the 0.95 measurement floor. *Structural rows* are measured and trend-locked (10% regression tolerance) while their gaps remain open: per-node wrapper minting costs (#312 endgame) and engine construction. *Data API* rows are informational.

data/docs/_references/processing-model.adoc

@@ -255,11 +255,18 @@ semantics.
 
 === Validation
 
-Pins:: `spec/moxml/xsd_regex_spec.rb`, `spec/moxml/xsd_spec.rb`, `spec/moxml/xsd_substitution_spec.rb`, `spec/moxml/xsd_underdetection_spec.rb`, `spec/moxml/xsd_version_spec.rb`
+Pins:: `spec/moxml/xsd_builtin_lexical_spec.rb`, `spec/moxml/xsd_engine_meta_spec.rb`, `spec/moxml/xsd_regex_spec.rb`, `spec/moxml/xsd_spec.rb`, `spec/moxml/xsd_substitution_spec.rb`, `spec/moxml/xsd_underdetection_spec.rb`, `spec/moxml/xsd_version_spec.rb`
 
 XSD validation through engines that ship a validator (libxml2;
 leptris tier-1: recognized roots, one-level content descent, lexical
-checks). `validate` returns accumulated `ValidationError` entries —
+checks). The built-in lexical answer is facade-owned:
+`Moxml::XSD.builtin_valid?` evaluates the Datatypes Part 2 lexical
+spaces (collapse for the token family, the unbounded integer family
+with bignum bounds, calendar and duration grammars, binary, QName
+with the reserved `xmlns` prefix) from the facade's own table on
+every adapter — an engine table converges to it, never the reverse;
+an unknown name raises `ArgumentError`. `validate` returns
+accumulated `ValidationError` entries —
 message always; line/column/path where the engine reports them, nil
 where it does not; `[]` means valid. Documents outside the engine's
 scope validate laxly, except that strict `xs:any` /
@@ -286,8 +293,14 @@ registered member must realize a position — any choice/all,
 cardinality violation, or unknown name keeps the engine's answer.
 A compiled schema reports the
 version its source declares: root `vc:minVersion="1.1"` scopes the
-document to 1.1, anything else is 1.0 (consumers scope 1.0-only
-checks with it; applying 1.1 semantics is the engine-side program).
+document to 1.1, anything else is 1.0 — on engines that serve their
+own effective version the engine's answer can only UPGRADE the
+reported value to 1.1, never downgrade the source annotation
+(consumers scope 1.0-only checks with it; applying 1.1 semantics is
+the engine-side program). Engines that expose a structured report
+surface `Schema#structured_errors` — one row per finding with
+kind/component/line/column/message; the face answers nil on
+bindings without it and #validate keeps the flat shape.
 Unsupported adapters raise
 `Moxml::NotImplementedError` at compile; `Moxml::XSD.supported?`
 answers without raising. RELAX NG rides engines with an RNG face

data/lib/moxml/adapter/base.rb

@@ -373,11 +373,6 @@ module Moxml
                 "XSD validation requires an adapter with an XSD engine"
         end
 
-        def xsd_builtin_valid?(_builtin, _lexical)
-          raise Moxml::NotImplementedError,
-                "XSD validation requires an adapter with an XSD engine"
-        end
-
         def xsd_declarations(_xsd_handle); end
 
         def xsd_compile_error(_xsd_handle); end

data/lib/moxml/adapter/leptris.rb

@@ -406,15 +406,6 @@ module Moxml
           handle.valid?(to_binding(document))
         end
 
-        def xsd_builtin_valid?(builtin, lexical)
-          unless XSD_SUPPORTED
-            raise Moxml::NotImplementedError,
-                  "XSD validation requires an adapter with an XSD engine"
-          end
-
-          ::Leptris::XML::XSD.builtin_valid?(builtin, lexical)
-        end
-
         def xsd_declarations(xsd_handle)
           xsd_handle.declaration_count
         end
@@ -425,6 +416,34 @@ module Moxml
           xsd_handle.release
         end
 
+        # moxml#460 item 2: the ENGINE's effective version (the
+        # authoritative source — it gates the 1.1 semantics). Nil
+        # when the binding predates the face (fall back to the
+        # rules heuristic on the facade side).
+        def xsd_version(xsd_handle)
+          return nil unless defined?(::Leptris::XML::XSD::Schema) &&
+            xsd_handle.is_a?(::Leptris::XML::XSD::Schema) &&
+            xsd_handle.respond_to?(:version)
+
+          xsd_handle.version
+        rescue ::Leptris::XML::Error
+          nil
+        end
+
+        # moxml#460/#1841: the engine's structured report — one
+        # {kind:, component:, line:, column:, message:} hash per
+        # finding. Nil when the binding predates the face.
+        def xsd_structured_errors(xsd_handle, doc)
+          return nil unless defined?(::Leptris::XML::XSD::Schema) &&
+            xsd_handle.is_a?(::Leptris::XML::XSD::Schema) &&
+            (xsd_handle.respond_to?(:structured_errors) ||
+             xsd_handle.respond_to?(:structured_errors, true))
+
+          xsd_handle.structured_errors(doc)
+        rescue ::Leptris::XML::Error
+          nil
+        end
+
         def xsd_compile_error(xsd_handle)
           xsd_handle.error
         end
@@ -911,9 +930,20 @@ module Moxml
           # Protocol-level node equality: one engine can hand out
           # two wrapper classes over the same C node (native layer +
           # binding), so raw == is not identity across the seam.
+          # Attributes are (name, value, element) triples without a
+          # node pointer; identity is the owning element plus the
+          # attribute name.
           def same_node?(one, other)
             return true if one.equal?(other)
 
+            if one.is_a?(::Leptris::XML::Attr) ||
+                other.is_a?(::Leptris::XML::Attr)
+              return one.is_a?(::Leptris::XML::Attr) &&
+                  other.is_a?(::Leptris::XML::Attr) &&
+                  one.name == other.name &&
+                  same_node?(one.element, other.element)
+            end
+
             if NATIVE_READ_LAYER
               native_one = one.is_a?(::Leptris::XML::NativeNode)
               native_other = other.is_a?(::Leptris::XML::NativeNode)
@@ -3135,6 +3165,14 @@ module Moxml
             node = to_binding(node)
             new_node = to_binding(new_node)
           end
+          # anchor the BINDING document: its handle owns the engine
+          # pool — while it lives, no retained address can dangle
+          if node.respond_to?(:document) && new_node.respond_to?(:document)
+            target = node.document
+            bsrc = new_node.document
+            target.retain_document!(bsrc) if target.respond_to?(:retain_document!) &&
+              bsrc.respond_to?(:freed?)
+          end
           pin_foreign_owner_document(node, new_node)
           # A PI inserted before the root lives at document level in
           # libleptris's model, not in the element tree.
@@ -3284,6 +3322,27 @@ module Moxml
         end
 
         def replace(node, new_node)
+          # leptris#1866: keep a cross-document source (a scratch doc
+          # parsed only to build the replacement) anchored on the
+          # target — wrapper caches on the target side may hold
+          # references the engine copy cannot see. STRICTLY
+          # best-effort: bare adapter-contract nodes carry no
+          # context/document, and retention must never break a
+          # replace.
+          begin
+            target = node.document if node.respond_to?(:document)
+            source = new_node.document if new_node.respond_to?(:document)
+            if target.respond_to?(:retain_document!) &&
+                source.respond_to?(:retain_document!)
+              target.retain_document!(source)
+              # the scratch CONTEXT (config + adapter) is part of the
+              # retained object graph — its death frees the native
+              # registrations even when the document wrapper survives
+              target.retain_document!(new_node.context)
+            end
+          rescue StandardError
+            # context/document unreadable on some wrapper flavors
+          end
           if NATIVE_READ_LAYER
             node = to_binding(node)
             new_node = to_binding(new_node)
@@ -3297,9 +3356,16 @@ module Moxml
             # tree cycles (standoc term cleanup does
             # t << n.replace(t2)). Insert + unlink instead: the unlink
             # path clears the sibling links.
-            node.add_next_sibling(new_node)
+            # leptris#1866: return the INSTALLED sibling, not
+            # new_node — a cross-document new_node belongs to its
+            # scratch document's arena (the insert deep-copies), and
+            # the temp wrapper returned here used to be stored in the
+            # parent's children memo; once the scratch was collected
+            # the memo handed out freed addresses (serializer
+            # segfault + empty attribute names in the output).
+            installed = node.add_next_sibling(new_node)
             node.unlink
-            return new_node
+            return installed || new_node
           end
 
           # libleptris only offers element-anchored insertion, so a
@@ -3326,6 +3392,9 @@ module Moxml
                 prev.c_ptr, new_node.c_ptr
               ),
             )
+            # leptris#1866: the raw face deep-copies; the caller must
+            # never keep the scratch wrapper (see the element branch).
+            prev.next_sibling || new_node
           else
             advance_mutation_version(parent)
             ::Leptris::XML::FFI.check_status(
@@ -3333,8 +3402,8 @@ module Moxml
                 parent.c_ptr, new_node.c_ptr
               ),
             )
+            parent.children.last || new_node
           end
-          new_node
         end
 
         NATIVE_APPEND_CHILDREN =
@@ -3659,8 +3728,16 @@ module Moxml
           return nil if namespaces && !namespaces.empty?
           # Reverse axes answer reverse-ordered from the native
           # engine; route them to the Ruby engine (document order).
-          return nil if REVERSE_AXIS_CACHE.get_or_set(expression) do
+          # The parent step is the exception on fixed bindings
+          # (PARENT_AXIS_NATIVE): it answers the owner element and
+          # the hot consumers are element-context paths (#474).
+          if REVERSE_AXIS_CACHE.get_or_set(expression) do
             expression_uses_reverse_axis?(expression)
+          end && !(PARENT_AXIS_NATIVE &&
+              !NON_PARENT_REVERSE_CACHE.get_or_set(expression) do
+                expression_uses_non_parent_reverse_axis?(expression)
+              end)
+            return nil
           end
 
           # The binding reports the root element parentless while moxml
@@ -3778,7 +3855,19 @@ module Moxml
         # expressions route to the Ruby engine, which orders them.
         REVERSE_AXES = %w[ancestor ancestor-or-self preceding
                           preceding-sibling parent].freeze
+        # Reverse axes answer reverse-ordered from the native engine
+        # (document order is the model's contract), so they route to
+        # the Ruby engine — EXCEPT the parent step on bindings
+        # serving the fixed engine: 1.9.385 carries leptris#1869
+        # (parent-of-attribute names the OWNER element) plus the
+        # cross-doc adopt attribute-chain fix, and standoc's svg
+        # id cleanup rides `./@id/..` hot (moxml#474).
+        PARENT_AXIS_NATIVE =
+          Gem::Version.new(::Leptris::VERSION) >= Gem::Version.new("1.9.385")
+        NON_PARENT_REVERSE_AXES = %w[ancestor ancestor-or-self
+                                     preceding preceding-sibling].freeze
         REVERSE_AXIS_CACHE = XPath::Cache.new(200)
+        NON_PARENT_REVERSE_CACHE = XPath::Cache.new(200)
 
         def expression_uses_parent_axis?(expression)
           ast = XPath::Parser.parse_with_cache(expression)
@@ -3805,6 +3894,25 @@ module Moxml
           end
         end
 
+        def expression_uses_non_parent_reverse_axis?(expression)
+          ast = XPath::Parser.parse_with_cache(expression)
+          contains_non_parent_reverse_axis?(ast)
+        rescue XPath::SyntaxError
+          true
+        end
+
+        def contains_non_parent_reverse_axis?(ast)
+          if ast.type == :axis && NON_PARENT_REVERSE_AXES.include?(ast.children.first)
+            return true
+          end
+          return false if ast.type == :parent
+
+          ast.children.any? do |child|
+            child.is_a?(XPath::AST::Node) &&
+              contains_non_parent_reverse_axis?(child)
+          end
+        end
+
         def contains_parent_axis?(ast)
           return true if ast.type == :parent
           return true if ast.type == :axis && ast.children.first == "parent"

data/lib/moxml/config.rb

@@ -92,7 +92,12 @@ module Moxml
 
         @leptris_preferred_available =
           begin
-            require "leptris"
+            # Route the require through a non-literal send: Opal::Builder
+            # resolves literal requires statically and dies on native-only
+            # gems (leptris is FFI; lutaml/moxml#475) before this rescue
+            # can degrade the adapter. The runtime require still raises
+            # LoadError under Opal, which the rescue below handles.
+            __send__(:require, "leptris")
             Moxml::Adapter.load(:leptris)
             Gem::Version.new(::Leptris::VERSION) >=
               Gem::Version.new(Moxml::Adapter::Leptris::MINIMUM_BINDING_VERSION)

data/lib/moxml/document.rb

@@ -9,6 +9,23 @@ module Moxml
     def initialize(native, context, adapter = nil, node_type = nil)
       super
       @has_xml_declaration = false
+      @retained_documents = nil
+    end
+
+    # leptris#1866: cross-document adoption lifetime anchor. An
+    # adopted subtree is deep-copied by the native engine, but
+    # adapter-level wrapper caches can retain references into the
+    # SOURCE document's scratch arena (standoc svg cleanup: a
+    # per-replacement scratch doc was collected and the host's
+    # serializer then segfaulted / emitted empty attribute names).
+    # Retaining the source Moxml document keeps every layer of the
+    # scratch alive for as long as the target lives; the cost is
+    # bounded by the number of cross-document adoptions.
+    def retain_document!(other)
+      return if other.nil? || other.equal?(self)
+
+      (@retained_documents ||= []) << other
+      other
     end
 
     def document

data/lib/moxml/node_set.rb

@@ -165,7 +165,12 @@ module Moxml
       native_node = node.is_a?(Node) ? node.native : node
       # Materialize the buffer first so it allocates at the pre-append
       # size and stays in lockstep with the natives.
-      wrapped_buffer << nil
+      # A pushed wrapper is kept: stripping it to the native and
+      # re-wrapping on iteration loses wrapper state — an attribute
+      # step's results carry their owner wiring (@parent_node), and
+      # the fresh wrap answers nil for it, so a following parent step
+      # (`./@id/..`) lost the owner element (#474).
+      wrapped_buffer << (node.is_a?(Node) ? node : nil)
       native_nodes << native_node
       self
     end

data/lib/moxml/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Moxml
-  VERSION = "0.5.166"
+  VERSION = "0.5.168"
 end

data/lib/moxml/xpath/ordering.rb

@@ -75,7 +75,18 @@ module Moxml
         [kind_rank, ancestry_path(node)]
       end
 
+      # Attributes are not children of their element, so their
+      # document position is the parent's; same-parent attributes
+      # keep their relative order (stable sort). A parentless
+      # attribute stays unplaceable.
       def ancestry_path(node)
+        if node.is_a?(Moxml::Attribute)
+          parent = node.parent
+          return [2_000_000] unless parent
+
+          return ancestry_path(parent)
+        end
+
         path = []
         current = node
         while current && !current.is_a?(Moxml::Document)