logseq-matryca-parser 1.7.0__tar.gz → 1.7.1__tar.gz

{logseq_matryca_parser-1.7.0 → logseq_matryca_parser-1.7.1}/CHANGELOG.md

@@ -7,6 +7,35 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.7.1] - 2026-08-08
+
+Patch release correcting the v1.7.0 SYNAPSE example promise, hardening release
+notes validation, and refreshing vulnerable optional-development dependencies.
+**No intentional breaking changes** to package APIs or CLI behavior.
+
+### Added
+
+- **Runnable SYNAPSE RAG example** —
+  [`examples/run_synapse_rag.py`](examples/run_synapse_rag.py) exercises the
+  LangChain, LlamaIndex, and context-enriched conversion paths against an
+  offline temporary Logseq graph, including verified expansion of a resolved
+  page embed ([#90](https://github.com/MarcoPorcellato/logseq-matryca-parser/issues/90)).
+
+### Changed
+
+- **Release contract** — release-note validation now rejects missing or
+  repository-escaping local Markdown links, preventing a tag from promising an
+  artifact that is not present in its source tree.
+- **Release documentation** — the v1.7.0 record and public release notes carry
+  a dated erratum for the omitted SYNAPSE example while preserving the
+  immutable v1.7.0 tag, artifacts, attestations, and checksums.
+
+### Security
+
+- **Optional AI/development lock** — constrained `aiohttp>=3.14.3` and
+  `setuptools>=83.0.0`, resolving the four Dependabot advisories open against
+  the v1.7.0 lock. Neither dependency is part of the base package runtime.
+
 ## [1.7.0] - 2026-08-08
 
 Minor release — structured diagnostics, deterministic title-collision handling,
@@ -35,7 +64,6 @@ to stable package exports or default CLI behavior.
   renders all findings with `scan --diagnostics`
   ([#102](https://github.com/MarcoPorcellato/logseq-matryca-parser/issues/102)).
 - **Documentation system guide** — [`docs/DOCUMENTATION_SYSTEM.md`](docs/DOCUMENTATION_SYSTEM.md) explains source authority, maintained versus historical surfaces, metadata, freshness, validation, the Matryca Knowledge projection workflow, and the repository's documentation evolution.
-- **Synapse RAG example** — [`examples/run_synapse_rag.py`](examples/run_synapse_rag.py) demonstrates all four `SynapseAdapter` methods (`to_langchain_documents`, `to_llamaindex_nodes`, `to_context_enriched_chunks`, `_expand_macros_and_embeds`) plus table-driven embed expansion edge cases.
 - **Embed expansion edge-case tests** — `TestEmbedExpansionEdgeCases` in [`tests/test_synapse.py`](tests/test_synapse.py) covers cycles, missing targets, and happy-path for both `{{embed [[Page]]}}` and `{{embed ((uuid))}}` (closes [#71](https://github.com/MarcoPorcellato/logseq-matryca-parser/issues/71)).
 - **Contributor onboarding (wave 4)** — ten new Good First Issues (GFI-39…GFI-48) filed on GitHub ([#88](https://github.com/MarcoPorcellato/logseq-matryca-parser/issues/88)–[#97](https://github.com/MarcoPorcellato/logseq-matryca-parser/issues/97)); index updated in [`docs/GOOD_FIRST_ISSUES.md`](docs/GOOD_FIRST_ISSUES.md).
 
@@ -70,6 +98,14 @@ to stable package exports or default CLI behavior.
   is created, and every consumer re-verifies the SHA-256 manifest for the exact
   distributions produced by the single build job.
 
+### Documentation erratum (2026-08-08)
+
+- The initial GitHub Release notes incorrectly listed
+  `examples/run_synapse_rag.py`. The file is not part of v1.7.0 and
+  [#90](https://github.com/MarcoPorcellato/logseq-matryca-parser/issues/90)
+  remains open. This documentation-only correction does not change the tag,
+  distributions, attestations, or published SHA-256 digests.
+
 ## [1.6.0] - 2026-07-02
 
 Minor release — Clean Architecture v1 structural slices (SRP/OCP), new public graph APIs, layer-boundary CI, and documentation SSOT. **No intentional breaking changes** to existing `matryca-parse` CLI behavior or stable package exports.

{logseq_matryca_parser-1.7.0 → logseq_matryca_parser-1.7.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: logseq-matryca-parser
-Version: 1.7.0
+Version: 1.7.1
 Summary: The Logos Protocol: Deterministic Logseq AST parsing for Matryca.ai.
 Project-URL: Homepage, https://github.com/MarcoPorcellato/logseq-matryca-parser
 Project-URL: Repository, https://github.com/MarcoPorcellato/logseq-matryca-parser
@@ -53,7 +53,7 @@ Description-Content-Type: text/markdown
 [![Status: Stable](https://img.shields.io/badge/Status-Stable-22c55e.svg?style=flat-square)](#)
 ![Origin: Matryca.ai](https://img.shields.io/badge/Origin-Matryca.ai-gold?style=for-the-badge)
 
-**v1.7.0** — structured diagnostics, deterministic collision handling, deep parser correctness, typed APIs, vault-bound writes, governed documentation, and verified immutable release artifacts. See the [CHANGELOG](CHANGELOG.md) and [release process](docs/RELEASE_PROCESS.md).
+**v1.7.1** — runnable offline SYNAPSE RAG integration, stricter release-note contracts, and security-refresh constraints for optional AI/development dependencies. See the [CHANGELOG](CHANGELOG.md) and [release process](docs/RELEASE_PROCESS.md).
 
 > *Turning a forest of local plain-text files into a unified semantic powerhouse.*
 
@@ -147,6 +147,21 @@ Logseq Matryca Parser is a deterministic **Stack-Machine engine** that acts as t
 
 ---
 
+## ⚡ Release highlights (v1.7.1)
+
+Patch release — completes the promised SYNAPSE example and closes the security
+alerts found during v1.7.0 post-release verification. **No intentional breaking
+changes** to package APIs or CLI behavior.
+
+| Area | Change |
+| :--- | :--- |
+| **SYNAPSE RAG** | New offline [`examples/run_synapse_rag.py`](examples/run_synapse_rag.py) exercises LangChain, LlamaIndex, context enrichment, and resolved page-embed expansion. |
+| **Release integrity** | Release notes now fail validation when a repository-local link is missing or escapes the source tree. |
+| **Dependency security** | Optional AI/development resolution constrains `aiohttp>=3.14.3` and `setuptools>=83.0.0`; base runtime dependencies are unchanged. |
+| **Test suite** | **532** pytest cases with **91.90%** coverage. |
+
+---
+
 ## ⚡ Release highlights (v1.7.0)
 
 Minor release — repository-wide correctness, safety, API, documentation, and release-engineering hardening. **No intentional breaking changes** to default CLI behavior or stable package exports.
@@ -412,7 +427,7 @@ Marker syntax (`[#A]`, `SCHEDULED: <...>`, `DEADLINE: <...>`) is stripped from `
 ## 🛠️ Quickstart
 
 ```bash
-# Install from PyPI (latest: v1.7.0)
+# Install from PyPI (latest: v1.7.1)
 uv pip install logseq-matryca-parser
 
 # Optional: filesystem watcher for live incremental graph updates

{logseq_matryca_parser-1.7.0 → logseq_matryca_parser-1.7.1}/README.md

@@ -12,7 +12,7 @@
 [![Status: Stable](https://img.shields.io/badge/Status-Stable-22c55e.svg?style=flat-square)](#)
 ![Origin: Matryca.ai](https://img.shields.io/badge/Origin-Matryca.ai-gold?style=for-the-badge)
 
-**v1.7.0** — structured diagnostics, deterministic collision handling, deep parser correctness, typed APIs, vault-bound writes, governed documentation, and verified immutable release artifacts. See the [CHANGELOG](CHANGELOG.md) and [release process](docs/RELEASE_PROCESS.md).
+**v1.7.1** — runnable offline SYNAPSE RAG integration, stricter release-note contracts, and security-refresh constraints for optional AI/development dependencies. See the [CHANGELOG](CHANGELOG.md) and [release process](docs/RELEASE_PROCESS.md).
 
 > *Turning a forest of local plain-text files into a unified semantic powerhouse.*
 
@@ -106,6 +106,21 @@ Logseq Matryca Parser is a deterministic **Stack-Machine engine** that acts as t
 
 ---
 
+## ⚡ Release highlights (v1.7.1)
+
+Patch release — completes the promised SYNAPSE example and closes the security
+alerts found during v1.7.0 post-release verification. **No intentional breaking
+changes** to package APIs or CLI behavior.
+
+| Area | Change |
+| :--- | :--- |
+| **SYNAPSE RAG** | New offline [`examples/run_synapse_rag.py`](examples/run_synapse_rag.py) exercises LangChain, LlamaIndex, context enrichment, and resolved page-embed expansion. |
+| **Release integrity** | Release notes now fail validation when a repository-local link is missing or escapes the source tree. |
+| **Dependency security** | Optional AI/development resolution constrains `aiohttp>=3.14.3` and `setuptools>=83.0.0`; base runtime dependencies are unchanged. |
+| **Test suite** | **532** pytest cases with **91.90%** coverage. |
+
+---
+
 ## ⚡ Release highlights (v1.7.0)
 
 Minor release — repository-wide correctness, safety, API, documentation, and release-engineering hardening. **No intentional breaking changes** to default CLI behavior or stable package exports.
@@ -371,7 +386,7 @@ Marker syntax (`[#A]`, `SCHEDULED: <...>`, `DEADLINE: <...>`) is stripped from `
 ## 🛠️ Quickstart
 
 ```bash
-# Install from PyPI (latest: v1.7.0)
+# Install from PyPI (latest: v1.7.1)
 uv pip install logseq-matryca-parser
 
 # Optional: filesystem watcher for live incremental graph updates

{logseq_matryca_parser-1.7.0 → logseq_matryca_parser-1.7.1}/SECURITY.md

@@ -6,8 +6,8 @@ Security fixes are provided **only for the latest released version** on [PyPI](h
 
 | Version | Supported |
 | ------- | --------- |
-| **1.7.0** (latest) | Yes |
-| 1.6.0 and older | No |
+| **1.7.1** (latest) | Yes |
+| 1.7.0 and older | No |
 
 We recommend always running the current release and upgrading promptly when a security advisory is published.
 

{logseq_matryca_parser-1.7.0 → logseq_matryca_parser-1.7.1}/docs/ARCHITECTURE.md

@@ -608,7 +608,7 @@ Recursive and character-budget chunkers assume **approximately flat prose**. Log
 | [`index.md`](index.md) | Canonical maintained knowledge-bundle entry point |
 | [`design-docs/README.md`](design-docs/README.md) | Warning before using historical DDD blueprints |
 
-### Quality gate (v1.7.0)
+### Quality gate (v1.7.1)
 
 Local and CI parity: `uv sync --all-extras` → `make lint` → `make check` →
 `make test` → `make vendor-name-check` → `make docs-check`. These targets are

{logseq_matryca_parser-1.7.0 → logseq_matryca_parser-1.7.1}/docs/CLEAN_CODE_ARCHITECTURE.md

@@ -19,7 +19,7 @@ superseded_by: null
 
 # Clean Code & Clean Architecture — Logseq Matryca Parser
 
-**Version:** documents **v1.7.0** maintainer contracts (v1 structural backlog complete)  
+**Version:** documents **v1.7.1** maintainer contracts (v1 structural backlog complete)
 **Audience:** contributors and Cursor agents patching `src/logseq_matryca_parser/`  
 **Companion:** [`ARCHITECTURE.md`](ARCHITECTURE.md) (LOGOS domain contract) · [`BUG_HUNT_REPORT.md`](BUG_HUNT_REPORT.md) (audit evidence) · [`CONTRIBUTING.md`](../CONTRIBUTING.md)
 

{logseq_matryca_parser-1.7.0 → logseq_matryca_parser-1.7.1}/docs/COOKBOOK.md

@@ -37,6 +37,14 @@ matryca-parse export /path/to/graph output --format langchain
 
 Requires optional `[ai]` extra (`uv sync --extra ai`).
 
+For a complete offline example that exercises the LangChain, LlamaIndex, and
+context-enriched exports—including a resolved Logseq page embed—run
+[`examples/run_synapse_rag.py`](../examples/run_synapse_rag.py):
+
+```bash
+uv run python examples/run_synapse_rag.py
+```
+
 ---
 
 ## Recipe 2 — Load vault + fluent graph query

{logseq_matryca_parser-1.7.0 → logseq_matryca_parser-1.7.1}/docs/RELEASE_PROCESS.md

@@ -39,6 +39,8 @@ version; use `vX.Y.Z` for the git tag).
 - [ ] Leave an empty `## [Unreleased]` section at the top
 - [ ] Set `__version__ = "X.Y.Z"` in `src/logseq_matryca_parser/_version.py`; Hatchling derives package metadata from this single source
 - [ ] Update `README.md`, `SECURITY.md`, and contributor-facing current-version references
+- [ ] Verify every file, command, issue disposition, and shipped capability
+      named in the versioned changelog against the exact release commit
 - [ ] Run `make all` (Ruff, Mypy, documentation checks, and Pytest)
 - [ ] Run `python -m scripts.check_release_contract --tag vX.Y.Z`
 - [ ] Build wheel and sdist once locally, run `python scripts/check_wheel_contract.py path/to/wheel.whl`, `twine check`, and record SHA-256 digests
@@ -52,8 +54,10 @@ python scripts/extract_changelog.py vX.Y.Z | less
 python -m scripts.check_release_contract --tag vX.Y.Z
 ```
 
-The first command shows exactly the section that will appear on GitHub. The
-second rejects a malformed tag, a tag/source/runtime mismatch, non-empty
+The first command shows exactly the section that will appear on GitHub. Review
+every file link and shipped claim against the exact commit that will receive
+the tag; a non-empty section can still contain a factual mistake. The second
+command rejects a malformed tag, a tag/source/runtime mismatch, non-empty
 `[Unreleased]`, a missing versioned section, or release notes without bullets.
 
 ### 3. Commit, tag, push
@@ -95,6 +99,23 @@ Do not rebuild or replace a published version. Inspect the failed job first:
 
 PyPI cannot be re-published for the same version; use a patch bump if the wheel upload failed.
 
+#### Post-publication documentation correction
+
+If the distributions are correct but the curated notes contain a factual
+documentation error:
+
+1. Do not move the tag, rebuild the distributions, or replace PyPI files.
+2. Verify the actual tagged tree and published package before deciding the
+   correction scope.
+3. Correct `CHANGELOG.md` on `main` with a dated erratum that states whether
+   artifact bytes, attestations, and digests are unchanged.
+4. Update the GitHub Release notes to the corrected versioned changelog text.
+5. Keep any undelivered issue open and record the correction in
+   [`docs/log.md`](log.md).
+
+Use a new patch release instead when runtime behavior or package contents — not
+only explanatory text — are wrong.
+
 ---
 
 ## Troubleshooting
@@ -103,7 +124,8 @@ PyPI cannot be re-published for the same version; use a patch bump if the wheel
 |---------|-----|
 | Tag on GitHub but no **Release** page | Confirm whether PyPI succeeded; recover only from the checksummed artifact of that exact workflow run. |
 | PyPI version already exists | Bump patch version; never re-use a published version. |
-| Notes look wrong | Re-run locally: `python scripts/extract_changelog.py vX.Y.Z` and compare to `CHANGELOG.md`. |
+| Notes look wrong before publication | Re-run locally: `python scripts/extract_changelog.py vX.Y.Z`, compare to `CHANGELOG.md`, and verify every named file and capability against the tag candidate. |
+| Notes are factually wrong after publication | Preserve the tag and artifacts; follow the documentation-correction procedure above and keep undelivered issues open. |
 | CI fails on tests | Run `make all` locally before tagging. |
 | Tag/version mismatch | Run `python -m scripts.check_release_contract --tag vX.Y.Z`; align `_version.py`, runtime metadata, and changelog before creating a new tag. |
 | Hash verification fails | Stop. Do not publish or attach the bundle; create a clean patch release after diagnosis. |

{logseq_matryca_parser-1.7.0 → logseq_matryca_parser-1.7.1}/docs/REPOSITORY_STELLAR_ROADMAP_2026-08-06.md

@@ -8,9 +8,9 @@ audience: maintainers
 owner: logseq-matryca-parser
 authority: source_repository
 execution_mode: reviewed
-last_verified: 2026-08-07
-verified: 2026-08-07
-stale_after: 2026-11-04
+last_verified: 2026-08-08
+verified: 2026-08-08
+stale_after: 2026-11-06
 okf_profile: matryca_okf_inspired_quality
 okf_spec_version: null
 source_commit: 8e90b44
@@ -318,11 +318,18 @@ and protects the target/workflow contract with focused tests. A repository-wide
 
 ### P1.6 — Release artifacts not built once
 
-**Status:** confirmed; covered by #105.
+**Status:** resolved by #105, PR #123, and v1.7.0 on 2026-08-08.
 
-Pre-flight, PyPI build, and GitHub release do not necessarily consume the same immutable wheel/sdist. Workflows use movable tags and the `nltk` VCS override is tag-based instead of commit-based.
+At the audit baseline, pre-flight, PyPI build, and GitHub release did not prove
+that they consumed the same immutable wheel/sdist, and workflow dependencies
+used movable tags. The v1.7.0 release graph now builds once, records and
+re-verifies SHA-256, publishes the exact files through PyPI OIDC, and creates
+the GitHub Release only after PyPI succeeds. Every external action is pinned to
+a reviewed full commit SHA.
 
-**Action:** build once, checksum, publish attested artifacts, release exact bytes, and align tags, versions, and changelog entries.
+**Evidence:** PR #123, release run 31237286005, public PyPI/GitHub hashes and
+provenance, and the execution record in section 17. #124 tracks the upstream
+Node.js runtime annotation without weakening this resolved lineage.
 
 ### P2 — Strategic debt valid but not as urgent as current findings
 
@@ -538,7 +545,8 @@ originally stacked on feature branches.
 
 ### Wave 4 — Release confidence
 
-- #105: build once / publish exact bytes;
+- #105: completed in v1.7.0 — build once / publish exact bytes;
+- #124: wait for official Node.js 24 artifact-action manifests, then repin;
 - pin actions by SHA;
 - pin VCS dependency commits;
 - install typed wheel in clean environment, verify `RECORD` and checksum;
@@ -656,7 +664,8 @@ FILE_URI_RESULT /private/etc/passwd
 ## 14. Limits and non-authoritative claims
 
 - No benchmark was run against a real or 10k-page vault.
-- No public release was qualified and no clean wheel installation was verified.
+- At the 2026-08-06 baseline, no public release was qualified and no clean wheel
+  installation was verified. Section 17 records the v1.7.0 resolution.
 - The follow-up phase opened PR #112, created issue #113, updated impacted issues, and closed only completed/duplicate entries in the reconciliation log. Milestones, branch protection, and remote workflows were not changed.
 - The study does not prove complete compatibility with all Logseq versions.
 - The symlink probe demonstrates macOS/POSIX behavior; the policy must include Windows matrix coverage.
@@ -720,7 +729,70 @@ every merged tranche reported seven passes and zero failures.
    federation still requires final checks on the resulting merged `main`.
 
 The unresolved roadmap is intentionally not folded into this stack: #103 and
-#104 are the next correctness foundations; #105 and #111 remain release and
-measurement work; #108 remains blocked on the corpus and benchmarks. Product
-RFCs and contributor issues retain their existing dispositions in the issue
-reconciliation ledger.
+#104 are the next correctness foundations; #111 remains measurement work; #108
+remains blocked on the corpus and benchmarks. #105 is completed by the release
+record below. Product RFCs and contributor issues retain their existing
+dispositions in the issue reconciliation ledger.
+
+## 17. v1.7.0 release execution record — 2026-08-08
+
+[PR #123](https://github.com/MarcoPorcellato/logseq-matryca-parser/pull/123)
+prepared the SemVer-minor release and squash merged as `af45c1b3`. Fourteen PR
+checks passed; fresh `main` CI and CodeQL also passed on that exact commit.
+Tag `v1.7.0` points to `af45c1b3e75dfc32f42cfede5083f90aec8b96ce`.
+
+The ordered [Release run](https://github.com/MarcoPorcellato/logseq-matryca-parser/actions/runs/31237286005)
+completed every job:
+
+1. Python 3.12 and 3.13 pre-flight ran dependency audit, `make all`, and clean
+   checkout verification.
+2. One build job validated tag/source/runtime/changelog, built wheel and sdist,
+   ran wheel and Twine checks, recorded SHA-256, and uploaded one immutable
+   bundle.
+3. PyPI downloaded and verified that bundle, then published it through trusted
+   publishing with OIDC attestations.
+4. The GitHub Release ran only after PyPI succeeded, re-verified the same
+   manifest, and attached the same wheel, sdist, and `SHA256SUMS`.
+
+Public verification matched all three digest surfaces:
+
+| Distribution | SHA-256 |
+|---|---|
+| `logseq_matryca_parser-1.7.0-py3-none-any.whl` | `6624b59742206ad9c4cf68dd00686f0995861ebc304f9241d05b5a3d047cf354` |
+| `logseq_matryca_parser-1.7.0.tar.gz` | `57e44dd90cbc7aa43b7fb47462fdddfe4d8759a45fd6c268250cfa1356a36f62` |
+
+PyPI exposes provenance for both files. A direct PyPI install reported metadata
+version `1.7.0`; reinstalling the byte-identical published wheel into the
+qualified dependency environment produced runtime version `1.7.0`, imported
+from `site-packages`, and rendered `matryca-parse --help` successfully. #105 is
+closed with this evidence.
+
+The initial release notes incorrectly listed `examples/run_synapse_rag.py`,
+which is absent from the tag; #90 therefore remains open. The correction is a
+dated changelog and GitHub Release erratum only: tag, distributions,
+attestations, and digests remain unchanged. The only workflow annotations were
+upstream Node.js 20 deprecation warnings; #124 tracks migration when official
+Node.js 24 artifact-action manifests become available.
+
+## 18. v1.7.1 corrective release candidate — 2026-08-08
+
+Post-release verification of v1.7.0 found one promised repository example was
+absent and four Dependabot alerts affected optional AI/development lock entries.
+The v1.7.1 candidate addresses those findings without changing the base runtime
+dependency set or stable package APIs:
+
+1. `examples/run_synapse_rag.py` runs offline against a temporary Logseq graph,
+   exercises all three public SYNAPSE conversion paths, and proves resolved
+   page-embed expansion; a regression test and Cookbook link protect it.
+2. The release-note contract rejects missing and repository-escaping local
+   links, carrying forward the post-v1.7.0 correction gate.
+3. The lock constrains `aiohttp>=3.14.3` and `setuptools>=83.0.0`; local base and
+   optional-AI dependency audits report no known vulnerabilities (the pinned
+   NLTK VCS requirement is reported as not version-auditable).
+4. The isolated candidate environment passes Ruff, Mypy, maintained-document
+   validation, the terminology gate, 532 tests, 91.90% coverage, the release
+   and wheel contracts, Twine checks, and zero import cycles.
+
+This section records a qualified candidate, not a completed publication. Final
+tag, workflow, checksums, provenance, installation, and issue-closure evidence
+must replace that status only after public verification.

{logseq_matryca_parser-1.7.0 → logseq_matryca_parser-1.7.1}/docs/log.md

@@ -8,9 +8,9 @@ audience: maintainers
 owner: logseq-matryca-parser
 authority: source_repository
 execution_mode: reviewed
-last_verified: 2026-08-07
-verified: 2026-08-07
-stale_after: 2027-02-02
+last_verified: 2026-08-08
+verified: 2026-08-08
+stale_after: 2027-02-04
 okf_profile: matryca_okf_inspired_quality
 okf_spec_version: null
 supersedes: null
@@ -19,6 +19,35 @@ superseded_by: null
 
 # Documentation evolution log
 
+## 2026-08-08
+
+- Prepared the v1.7.1 patch candidate to deliver the previously omitted
+  `examples/run_synapse_rag.py`, validate its three public SYNAPSE conversion
+  paths and resolved page embed, and constrain the optional AI/development lock
+  to `aiohttp>=3.14.3` and `setuptools>=83.0.0`. Publication and issue closure
+  remain contingent on merged CI, tag workflow, and public artifact checks.
+- Merged [PR #123](https://github.com/MarcoPorcellato/logseq-matryca-parser/pull/123)
+  and published the SemVer-minor v1.7.0 release from
+  `main@af45c1b3e75dfc32f42cfede5083f90aec8b96ce`.
+- Verified the complete ordered release run: Python 3.12/3.13 pre-flight,
+  dependency audit, non-mutating quality gate, one wheel/sdist build, wheel and
+  Twine contracts, SHA-256 manifest, PyPI trusted publication with OIDC
+  attestations, and GitHub Release creation from the same bundle.
+- Reconciled GitHub, PyPI, and local verification. Wheel SHA-256 is
+  `6624b59742206ad9c4cf68dd00686f0995861ebc304f9241d05b5a3d047cf354`;
+  sdist SHA-256 is
+  `57e44dd90cbc7aa43b7fb47462fdddfe4d8759a45fd6c268250cfa1356a36f62`.
+  PyPI provenance exists for both files; direct installation, runtime metadata,
+  package import, and CLI help report v1.7.0 successfully.
+- Closed #105 with public evidence and opened
+  [#124](https://github.com/MarcoPorcellato/logseq-matryca-parser/issues/124)
+  for the upstream Node.js 20 artifact-action annotations. Current official
+  releases still declare `node20`, so no unreviewed workaround was introduced.
+- Corrected a factual release-note error: `examples/run_synapse_rag.py` is not
+  present in v1.7.0, so #90 remains open. Added a dated changelog erratum and a
+  post-publication correction procedure; tag, artifacts, attestations, and
+  digests remain unchanged.
+
 ## 2026-08-07
 
 - Prepared [PR #122](https://github.com/MarcoPorcellato/logseq-matryca-parser/pull/122)

{logseq_matryca_parser-1.7.0 → logseq_matryca_parser-1.7.1}/docs/quality/ISSUE_RECONCILIATION_2026-08-06.md

@@ -8,9 +8,9 @@ audience: maintainers
 owner: logseq-matryca-parser
 authority: source_repository
 execution_mode: reviewed
-last_verified: 2026-08-07
-verified: 2026-08-07
-stale_after: 2026-09-05
+last_verified: 2026-08-08
+verified: 2026-08-08
+stale_after: 2026-09-07
 okf_profile: matryca_okf_inspired_quality
 okf_spec_version: null
 supersedes: docs/quality/ISSUE_TRIAGE_2026-07.md
@@ -25,10 +25,11 @@ closure is justified only by current code, tests or an explicit duplicate;
 runtime behavior without a dedicated regression test remains tracked.
 
 The reconciliation was published in [PR #112](https://github.com/MarcoPorcellato/logseq-matryca-parser/pull/112).
-After the actions below, merged follow-up PRs #114-#121, and the evidence-based
-closure of #106, live verification on 2026-08-07 found 23 open issues. The
-parser P0 and the completed API, collision, and filesystem tranches are no
-longer part of the open backlog.
+After the actions below, merged follow-up PRs #114-#123, and the evidence-based
+closure of #105 and #106, live verification on 2026-08-08 found 23 open issues:
+#105 left the backlog after the verified v1.7.0 publication, while new upstream
+runtime follow-up #124 entered it. The parser P0 and the completed API,
+collision, filesystem, and release-lineage tranches are no longer open.
 
 ## Decisions
 
@@ -52,7 +53,7 @@ longer part of the open backlog.
 | #87 | Keep, high priority | Now | Deterministic pathological parser latency; feeds #111 |
 | #88 | Keep | Next | Direct strategy-module tests are still absent |
 | #89 | Keep as canonical graph API test issue | Next | Dedicated boundary tests remain incomplete |
-| #90 | Keep | Next | `examples/run_synapse_rag.py` is absent |
+| #90 | Close only after verified v1.7.1 publication | Release gate | The patch candidate adds the offline example, all three SYNAPSE exports, resolved page-embed proof, Cookbook link, and regression test |
 | #91 | Keep | Next | Direct `kinetic_export` tests are absent |
 | #92 | Keep, narrow to regression protection | Next | Runtime resolves canonical aliases; dedicated alias test is absent |
 | #93 | Keep, narrow to LENS recipe | Next | Broken-ref tip exists; complete visualization recipe is absent |
@@ -64,7 +65,7 @@ longer part of the open backlog.
 | #102 | Closed by merged [PR #120](https://github.com/MarcoPorcellato/logseq-matryca-parser/pull/120) | Shipped | Stable collision diagnostics, preserved winner policy, typed strict mode, CLI rendering, and no-ghost tests |
 | #103 | Expand | Wave 0/3 | Add rename/backlink cold-load equivalence |
 | #104 | Expand | Wave 0/3 | Add arbitrary-depth parser regression matrix |
-| #105 | Keep | Wave 4 | Immutable build-once release lineage remains absent |
+| #105 | Closed after [PR #123](https://github.com/MarcoPorcellato/logseq-matryca-parser/pull/123) and v1.7.0 verification | Shipped | One checksummed bundle reached PyPI through OIDC and the GitHub Release byte-for-byte; public provenance, hashes, install, runtime, metadata, and CLI were verified |
 | #106 | Closed after merged [PR #121](https://github.com/MarcoPorcellato/logseq-matryca-parser/pull/121) | Shipped | Vault confinement, target identity, metadata preservation, dry-run patch, limits, typed diagnostics, symlink and `file://` tests |
 | #107 | Closed by merged [PR #117](https://github.com/MarcoPorcellato/logseq-matryca-parser/pull/117) | Shipped | PEP 561 wheel marker, derived version contract, API tiers, import/signature tests, and downstream Mypy probe |
 | #108 | Keep blocked by prerequisites | Wave 6 | Begin only after deep parser fix and #104 corpus |
@@ -92,7 +93,7 @@ longer part of the open backlog.
 completed: parser P0 + #106 filesystem boundary + #101/#102/#107 foundations
   -> next: #103 snapshot correctness + #104 semantic corpus
   -> complete #109 documentation federation + #110 diagnostic producers
-  -> #105 release provenance
+  -> completed: #105 release provenance in v1.7.0
   -> #111 measured scale
   -> #108 parser phase extraction
 ```
@@ -117,3 +118,24 @@ not touch protected parser/graph hubs or weaken these gates.
 - [PR #122](https://github.com/MarcoPorcellato/logseq-matryca-parser/pull/122)
   publishes this final live-backlog reconciliation directly against `main`
   without claiming additional implementation scope.
+- Merged [PR #123](https://github.com/MarcoPorcellato/logseq-matryca-parser/pull/123)
+  and published v1.7.0 from `main@af45c1b3`. The ordered release run built one
+  wheel/sdist bundle, re-verified its SHA-256 manifest before PyPI and GitHub,
+  published OIDC attestations, and passed an independent install/runtime/CLI
+  check. #105 is closed.
+- Kept #90 open after live tree verification found that
+  `examples/run_synapse_rag.py` is still absent. The initial v1.7.0 release
+  notes listed it incorrectly; the changelog and GitHub Release receive a
+  transparent documentation-only erratum without changing artifacts.
+- Prepared the v1.7.1 patch candidate to satisfy every #90 acceptance
+  criterion and constrain the two vulnerable optional AI/development
+  dependencies. #90 remains open until the merged tag, GitHub Release, and
+  PyPI package have been verified publicly.
+
+## Post-baseline issue — 2026-08-08
+
+- [#124](https://github.com/MarcoPorcellato/logseq-matryca-parser/issues/124)
+  tracks the Node.js 20 deprecation annotations emitted by the successful
+  v1.7.0 run. Official `upload-artifact` v7.0.1 and `download-artifact` v8.0.1
+  still declare `node20`, so the repository must wait for official Node.js 24
+  manifests and then repin reviewed full SHAs without changing release lineage.

logseq_matryca_parser-1.7.1/examples/run_synapse_rag.py

@@ -0,0 +1,78 @@
+"""Run the three public SYNAPSE conversion paths against an offline fixture.
+
+Run from the repository root after installing the optional AI integrations::
+
+    uv sync --extra ai
+    uv run python examples/run_synapse_rag.py
+
+The temporary Logseq graph includes a resolved page embed so the contextual
+export demonstrates transclusion without requiring a real vault or network.
+"""
+
+from __future__ import annotations
+
+import sys
+from pathlib import Path
+from tempfile import TemporaryDirectory
+
+from logseq_matryca_parser import LogseqGraph, SynapseAdapter
+
+
+def build_fixture(root: Path) -> LogseqGraph:
+    """Create and load a minimal two-page Logseq graph."""
+    pages = root / "pages"
+    pages.mkdir(parents=True)
+    (pages / "RAG Demo.md").write_text(
+        "tags:: rag, demo\n\n"
+        "- Retrieval context\n"
+        "  - Include this knowledge: {{embed [[Shared Knowledge]]}}\n",
+        encoding="utf-8",
+    )
+    (pages / "Shared Knowledge.md").write_text(
+        "- Matryca preserves Logseq hierarchy and provenance.\n",
+        encoding="utf-8",
+    )
+    return LogseqGraph.load_directory(root)
+
+
+def run_demo() -> None:
+    """Convert the fixture with LangChain, LlamaIndex, and contextual exports."""
+    with TemporaryDirectory(prefix="logseq-matryca-synapse-") as directory:
+        graph = build_fixture(Path(directory))
+        page = graph.pages["RAG Demo"]
+
+        langchain_documents = SynapseAdapter.to_langchain_documents(
+            page.root_nodes,
+            source_name=page.title,
+        )
+        llamaindex_nodes = SynapseAdapter.to_llamaindex_nodes(
+            page.root_nodes,
+            page_title=page.title,
+        )
+        contextual_chunks = SynapseAdapter.to_context_enriched_chunks(
+            page.root_nodes,
+            graph,
+        )
+
+        expanded = contextual_chunks[-1].page_content
+        expected_embed = "Matryca preserves Logseq hierarchy and provenance."
+        if expected_embed not in expanded or "{{embed" in expanded:
+            raise RuntimeError("resolved page embed was not expanded in contextual output")
+
+        print(f"LangChain documents: {len(langchain_documents)}")
+        print(f"LlamaIndex nodes: {len(llamaindex_nodes)}")
+        print(f"Context-enriched chunks: {len(contextual_chunks)}")
+        print(f"Resolved page embed: {expanded}")
+
+
+if __name__ == "__main__":
+    try:
+        run_demo()
+    except ImportError as exc:
+        print(
+            "SYNAPSE AI dependencies are missing. "
+            "Install them with `uv sync --extra ai` and run this script again. "
+            f"Details: {exc}",
+            file=sys.stderr,
+        )
+        raise SystemExit(1) from exc

{logseq_matryca_parser-1.7.0 → logseq_matryca_parser-1.7.1}/metrics/index.json

@@ -6,5 +6,5 @@
     "2026-Q3"
   ],
   "legacy_migrated": true,
-  "updated_at": "2026-08-07"
+  "updated_at": "2026-08-08"
 }