logseq-matryca-parser 1.8.2__tar.gz → 1.10.0__tar.gz

{logseq_matryca_parser-1.8.2 → logseq_matryca_parser-1.10.0}/.github/workflows/ci.yml

@@ -25,7 +25,7 @@ jobs:
           persist-credentials: false
 
       - name: Install pinned uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           version: "0.11.7"
           python-version: "3.12"
@@ -65,7 +65,7 @@ jobs:
           persist-credentials: false
 
       - name: Install pinned uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           version: "0.11.7"
           python-version: ${{ matrix.python-version }}
@@ -93,7 +93,7 @@ jobs:
           persist-credentials: false
 
       - name: Install pinned uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           version: "0.11.7"
           python-version: "3.12"
@@ -111,7 +111,9 @@ jobs:
           --output-file "${{ runner.temp }}/requirements-audit.txt"
 
       - name: Audit exported dependencies
-        run: uv run pip-audit --no-deps --disable-pip -r "${{ runner.temp }}/requirements-audit.txt"
+        run: >-
+          uv run pip-audit --no-deps --disable-pip
+          -r "${{ runner.temp }}/requirements-audit.txt"
 
   package-contract:
     name: Wheel and source distribution contract
@@ -124,7 +126,7 @@ jobs:
           persist-credentials: false
 
       - name: Install pinned uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           version: "0.11.7"
           python-version: "3.12"

{logseq_matryca_parser-1.8.2 → logseq_matryca_parser-1.10.0}/.github/workflows/dependency-hygiene.yml

@@ -24,7 +24,7 @@ jobs:
           persist-credentials: false
 
       - name: Install pinned uv without a shared cache
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           version: "0.11.7"
           python-version: "3.12"

{logseq_matryca_parser-1.8.2 → logseq_matryca_parser-1.10.0}/.github/workflows/parser-adversarial.yml

@@ -24,7 +24,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           version: "0.11.7"
           python-version: "3.12"

{logseq_matryca_parser-1.8.2 → logseq_matryca_parser-1.10.0}/.github/workflows/pypi_publish.yml

@@ -28,7 +28,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           version: "0.11.7"
           python-version: ${{ matrix.python-version }}
@@ -40,7 +40,8 @@ jobs:
       - name: Audit production dependencies
         run: |
           uv export --all-extras --no-dev --no-emit-workspace -o "${{ runner.temp }}/requirements-audit.txt"
-          uv run pip-audit --no-deps --disable-pip -r "${{ runner.temp }}/requirements-audit.txt"
+          uv run pip-audit --no-deps --disable-pip \
+            -r "${{ runner.temp }}/requirements-audit.txt"
 
       - name: Run full quality gate
         run: make all
@@ -65,7 +66,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           version: "0.11.7"
           python-version: "3.12"

{logseq_matryca_parser-1.8.2 → logseq_matryca_parser-1.10.0}/.github/workflows/scorecard.yml

@@ -39,6 +39,6 @@ jobs:
           if-no-files-found: error
 
       - name: Publish findings to code scanning
-        uses: github/codeql-action/upload-sarif@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+        uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
         with:
           sarif_file: results.sarif

{logseq_matryca_parser-1.8.2 → logseq_matryca_parser-1.10.0}/.github/workflows/workflow-analysis.yml

@@ -35,7 +35,7 @@ jobs:
           persist-credentials: false
 
       - name: Install pinned uv without a shared cache
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           version: "0.11.7"
           python-version: "3.12"

{logseq_matryca_parser-1.8.2 → logseq_matryca_parser-1.10.0}/.pre-commit-config.yaml

@@ -21,3 +21,4 @@ repos:
         - pytest>=9.0.3
         - networkx>=3.0.0
         - pyvis>=0.3.2
+        - hypothesis==6.168.1

{logseq_matryca_parser-1.8.2 → logseq_matryca_parser-1.10.0}/AGENTS.md

@@ -17,10 +17,10 @@ backlinks, exports, visualizations, and AI chunks are derived views.
 |---|---|---|
 | **LOGOS** | Parse Logseq Markdown into a deterministic AST | `LogosParser`, `StackMachineParser` |
 | **Graph** | Load a vault, resolve pages and aliases, query nodes, inspect backlinks | `LogseqGraph` |
-| **SYNAPSE** | Export lineage-aware LangChain documents, LlamaIndex nodes, and enriched chunks | `SynapseAdapter` |
+| **SYNAPSE** | Export lineage-aware LangChain documents and enriched chunks; delegate native LlamaIndex nodes to the separate companion | `SynapseAdapter` |
 | **FORGE** | Serialize JSON, clean Markdown, Logseq pages, and Obsidian-compatible output | `ForgeExporter`, `serialize_logseq_page` |
 | **KINETIC** | Run CLI parse, export, scan, visualize, agent-read, and agent-write workflows | `matryca-parse` |
-| **LENS** | Build an interactive graph visualization | `GraphVisualizer` |
+| **LENS** | Build a compatible reference-topology visualization; planned compatible deprecation follows a later Trama UI migration | `GraphVisualizer` |
 | **Agent access** | Read a token-efficient X-Ray outline or perform bounded writes | `agent-read`, `agent-write`, `logseq_agent_write` |
 
 ## Start here
@@ -79,6 +79,12 @@ make vendor-name-check
 - Treat paths, symlinks, `file://` assets, atomic replacement, and vault
   containment as security boundaries.
 - Keep optional integrations lazy; the base parser must remain lightweight.
+- The Parser `[ai]` extra provides LangChain; `[all]` also includes the
+  visualization dependencies. Neither extra installs `llama-index-core` or
+  NLTK. Do not add them back to the Parser dependency graph; native LlamaIndex
+  nodes belong to the separately maintained companion. Its proposed
+  package name is not yet published, so do not present it as currently
+  installable until its repository and distribution are verified.
 - Add focused regression tests for behavioral changes and do not lower the
   coverage floor.
 - Do not commit local caches, generated audit data, vault contents, credentials,

{logseq_matryca_parser-1.8.2 → logseq_matryca_parser-1.10.0}/CHANGELOG.md

@@ -7,6 +7,55 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.10.0] - 2026-09-27
+
+### Changed
+
+- **LlamaIndex companion boundary** — keep `SynapseAdapter.to_llamaindex_nodes()`
+  as a lazy compatibility shim while moving native node construction out of the
+  Parser distribution. The proposed companion package is not yet published;
+  `[ai]` provides LangChain, while `[all]` also includes visualization
+  dependencies. Neither extra installs LlamaIndex or NLTK.
+
+### Security
+
+- **Remove Parser's NLTK dependency chain** — exclude `llama-index-core` and
+  NLTK from Parser extras, lock, and package metadata, and remove the temporary
+  Parser audit waiver. This does not resolve the upstream NLTK advisory or set
+  the separate companion's security policy.
+
+## [1.9.0] - 2026-09-06
+
+### Added
+
+- **In-memory snapshot graph factory** — `SnapshotPage` and
+  `LogseqGraph.from_snapshot_pages()` build the existing parser graph indexes from
+  bounded, caller-captured Markdown without source discovery, file reopening, or
+  graph-root filesystem inspection.
+  The stable additive API preserves deterministic ordering, parser identities,
+  aliases, backlinks, diagnostics, and opt-in strict modes while keeping source
+  capture and cross-product projection outside Parser (#209).
+
+### Security
+
+- **Time-bounded NLTK advisory exception** — document the exact optional AI
+  dependency exposure, non-reachability evidence, compensating controls,
+  owner, upstream advisory, and 2026-10-05 expiry for `PYSEC-2026-3740` while
+  no patched NLTK registry release exists. CI and release audits ignore only
+  that advisory; all other dependency findings remain fail-closed.
+
+### Changed
+
+- **LENS Stage 0 transition** — mark the compatible `GraphVisualizer`,
+  `visualize`, and `demo` surfaces as transitional and feature-frozen, with
+  Matryca Trama as future user-facing graph-intelligence destination. This
+  release makes no API removal or deprecation-warning change (#213).
+- **Parser-Plumber boundary** — record Parser as the deterministic Logseq OG
+  parsing library and Plumber as the sole cross-product Logseq gateway to
+  Trama and Brain. Existing Parser APIs and LENS behavior remain compatible;
+  any Trama UI migration requires a later, separately reviewed compatible
+  deprecation plan (#203).
+
 ## [1.8.2] - 2026-08-30
 
 ### Changed

{logseq_matryca_parser-1.8.2 → logseq_matryca_parser-1.10.0}/CONTRIBUTING.md

@@ -17,7 +17,7 @@ User-facing behavior is documented in:
 - [`docs/ARCHITECTURE.md`](docs/ARCHITECTURE.md) — LOGOS, SYNAPSE, `LogseqGraph`, agents, and data flow
 - [`docs/internal/LOCAL_CODE_STUDY.md`](docs/internal/LOCAL_CODE_STUDY.md) — maintainer local code audit runbook (not for public issues/CHANGELOG)
 - [`docs/logseq_ast_primer.md`](docs/logseq_ast_primer.md) — Logseq Spatial Markdown domain rules
-- [`CHANGELOG.md`](CHANGELOG.md) — release candidate **1.8.2**, latest published release **1.8.1**, and **Unreleased** changes (Keep a Changelog)
+- [`CHANGELOG.md`](CHANGELOG.md) — prepared **1.10.0** release notes (not yet published); latest released version remains **1.9.0** (Keep a Changelog)
 - [`docs/RELEASE_PROCESS.md`](docs/RELEASE_PROCESS.md) — version bump, tag, and PyPI publish checklist
 - [`docs/CI_ASSURANCE.md`](docs/CI_ASSURANCE.md) — pull-request, scheduled, settings-managed, and release checks
 - [`docs/CODEQL.md`](docs/CODEQL.md) — CodeQL default setup (no custom `codeql.yml`)

{logseq_matryca_parser-1.8.2 → logseq_matryca_parser-1.10.0}/Makefile

@@ -9,7 +9,7 @@ lint-fix:
 	uv run ruff check . --fix
 
 check:
-	uv run mypy src/ tests/ examples/ scripts/check_documentation.py scripts/check_release_contract.py scripts/check_wheel_contract.py scripts/generate_supply_chain_evidence.py scripts/update_compat_snapshots.py
+	uv run mypy src/ tests/ examples/ scripts/check_documentation.py scripts/check_release_contract.py scripts/check_vendor_free_docs.py scripts/check_wheel_contract.py scripts/generate_supply_chain_evidence.py scripts/update_compat_snapshots.py
 
 vendor-name-check:
 	bash scripts/check_vendor_free_docs.sh

{logseq_matryca_parser-1.8.2 → logseq_matryca_parser-1.10.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: logseq-matryca-parser
-Version: 1.8.2
+Version: 1.10.0
 Summary: The Logos Protocol: Deterministic Logseq AST parsing for Matryca.ai.
 Project-URL: Homepage, https://github.com/MarcoPorcellato/logseq-matryca-parser
 Project-URL: Repository, https://github.com/MarcoPorcellato/logseq-matryca-parser
@@ -26,10 +26,8 @@ Requires-Dist: rich>=13.7.1
 Requires-Dist: typer>=0.12.0
 Provides-Extra: ai
 Requires-Dist: langchain-core; extra == 'ai'
-Requires-Dist: llama-index-core; extra == 'ai'
 Provides-Extra: all
 Requires-Dist: langchain-core; extra == 'all'
-Requires-Dist: llama-index-core; extra == 'all'
 Requires-Dist: networkx>=3.0.0; extra == 'all'
 Requires-Dist: pyvis>=0.3.2; extra == 'all'
 Provides-Extra: viz
@@ -87,9 +85,11 @@ selected by the caller.
 ### Choose your workflow
 
 - **Parse and query:** load one page or a complete vault as a typed AST and graph.
-- **Build RAG context:** export LangChain documents, LlamaIndex nodes, or enriched chunks.
+- **Build RAG context:** export LangChain documents and enriched chunks; use
+  the separate LlamaIndex companion when available.
 - **Move knowledge:** generate JSON, clean Markdown, or an Obsidian vault.
-- **Visualize:** render an interactive graph with LENS.
+- **Visualize:** render an interactive reference-topology graph with the transitional,
+  feature-frozen LENS adapter.
 - **Use an AI agent:** start from [`AGENTS.md`](AGENTS.md) or the concise [`llms.txt`](llms.txt) index.
 
 ---
@@ -109,7 +109,16 @@ The PKM (Personal Knowledge Management) world is currently forcing users to make
 ### 🔱 The Matryca Solution: The Best of Both Worlds
 **Logseq Matryca Parser** is the ultimate bridge. It allows you to **keep your sovereign, future-proof Markdown files**, while synthesizing a **Virtual Global Graph** in RAM at runtime.
 
-It acts as the strict **File System Driver** for your LLM OS. By using a deterministic Stack-Machine to parse your outliner topology, it feeds LangChain or LlamaIndex with the exact parent-child context of every single block.
+It acts as the strict **File System Driver** for your LLM OS. A deterministic
+Stack-Machine parses outliner topology and preserves each block's parent-child
+context for LangChain and, through a separate optional companion, LlamaIndex.
+
+The Parser's `[ai]` and `[all]` extras do not install LlamaIndex. The
+`logseq-matryca-parser-llamaindex` companion is planned but not yet published
+on PyPI; until then, `SynapseAdapter.to_llamaindex_nodes()` reports that the
+companion is unavailable. The Parser lock and distributions no longer include
+`llama-index-core` or NLTK. This removes that dependency chain from Parser; it
+does not claim that the separate NLTK advisory is fixed for other consumers.
 
 *You get the reasoning power of a centralized relational database, without sacrificing the plain-text soul of your Second Brain in Logseq.*
 
@@ -182,12 +191,19 @@ Logseq Matryca Parser is a deterministic **Stack-Machine engine** that acts as t
 | :--- | :--- |
 | **Parse faithfully — LOGOS** | Deterministic AST parsing for outlines, YAML and native properties, tasks, temporal markers, references, assets, code/math/query shields, stable UUIDs, line ranges, and format-preserving round trips. |
 | **Understand the vault — Graph** | Canonical pages, aliases, backlinks, inherited properties, case-insensitive lookup, namespace resolution, fluent queries, broken-reference diagnostics, and optional per-file live reloads. |
-| **Export and integrate — SYNAPSE, FORGE, LENS** | Lineage-aware LangChain and LlamaIndex exports, context-enriched chunks, JSON and Markdown serialization, Obsidian vault generation, and interactive graph visualization. |
+| **Export and integrate — SYNAPSE, FORGE, LENS** | Lineage-aware LangChain exports and context-enriched chunks; LlamaIndex nodes through a separate companion; JSON and Markdown serialization, Obsidian vault generation, and interactive graph visualization. |
 | **Automate safely — KINETIC and agent tools** | CLI parse, scan, export, and visualization; token-efficient X-Ray reads; append-only logging; bounded AST writes; vault containment, dry-run patches, and atomic replacement. |
 
 The base parser is local-first and has zero telemetry. Optional AI, watcher, and
 visualization dependencies remain lazy. See the [architecture](docs/ARCHITECTURE.md)
 and [API stability reference](docs/reference/API_STABILITY.md) for exact boundaries.
+For cross-product Logseq OG use, Plumber is the gateway to Trama and Brain;
+Parser remains the deterministic parsing stage. LENS stays compatible while a
+future Trama graph-intelligence migration is separately designed and released.
+Stage 0 marks LENS as transitional and feature-frozen: `GraphVisualizer`,
+`matryca-parse visualize`, and `matryca-parse demo` remain available without a
+deprecation warning. Matryca Trama is the destination for future user-facing
+graph intelligence.
 
 ### Data model — `LogseqNode` task fields
 
@@ -219,7 +235,7 @@ uv sync --all-extras
 ```
 
 ```bash
-# 1. Visualize your local graph (LENS)
+# 1. Visualize your local graph (LENS: transitional, feature-frozen)
 matryca-parse visualize /path/to/logseq/graph my-map.html
 
 # 2. Export for AI / RAG (SYNAPSE)
@@ -258,6 +274,14 @@ graph = LogseqGraph.load_directory("/path/to/logseq/graph")
 page_obj = graph.get_page("My Page")  # case-insensitive
 effective = graph.get_effective_properties(page_obj.root_nodes[0].uuid)
 
+# Build the same in-memory indexes from caller-captured Markdown without filesystem access.
+from logseq_matryca_parser import SnapshotPage
+
+snapshot_graph = LogseqGraph.from_snapshot_pages(
+    "/path/to/logseq/graph",
+    [SnapshotPage("pages/Project.md", "- Captured block\n")],
+)
+
 # Export to LangChain with lineage metadata
 docs = SynapseAdapter.to_langchain_documents(page.root_nodes, source_name=page.title)
 
@@ -267,6 +291,14 @@ from logseq_matryca_parser import StackMachineParser
 strict_page = StackMachineParser(strict_refs=True).parse_page_file("page.md")
 ```
 
+`uv sync --extra ai` installs LangChain. `[all]` also installs the visualization
+dependencies. Neither extra installs LlamaIndex or NLTK. LlamaIndex export
+remains available through the `SynapseAdapter` compatibility method when the
+separate `logseq-matryca-parser-llamaindex` companion is installed. That
+companion is planned but not yet published on PyPI; see the
+[support matrix](docs/reference/CONFORMANCE_SUPPORT_MATRIX.md) for the current
+boundary. The Parser itself does not install `llama-index-core` or NLTK.
+
 ### 🤖 Agentic Write Access (Append-Only)
 
 Agents such as Hermes or OpenClaw can record structured notes into a Logseq graph **without rewriting existing pages**. The helper `logseq_agent_write` only **opens the weekly agent page in append mode** (`"a"`), writes a new bullet (journal link + optional tag links + body), and never truncates or replaces prior content—so routine logging cannot wipe blocks that already live in that file.
@@ -288,7 +320,9 @@ assert result["status"] == "success"
 ---
 
 ## 🗺️ Roadmap
-- [ ] **Desktop GUI:** Standalone app for non-technical users. [(Join the RFC)](https://github.com/MarcoPorcellato/logseq-matryca-parser/issues/3)
+- [ ] **Graph-intelligence UI:** A future Matryca Trama surface may succeed the
+  compatible Parser LENS workflow after a separately reviewed migration; Parser
+  does not commit to a standalone GUI. [(Track the historical RFC)](https://github.com/MarcoPorcellato/logseq-matryca-parser/issues/3)
 - [x] **Obsidian Adapter:** Native CLI export (`--format obsidian`) with YAML frontmatter and `^` block anchors.
 - [ ] **Ollama Integration:** One-click local RAG setup. [(RFC draft)](docs/rfc/OLLAMA_RAG.md) · [(Track progress #34)](https://github.com/MarcoPorcellato/logseq-matryca-parser/issues/34)
 
@@ -319,11 +353,15 @@ We welcome issues, pull requests, and constructive feedback.
 
 ## 📦 Release history
 
+Version 1.10.0 release notes are prepared, but the package has not yet been
+published to PyPI. The latest published release remains v1.9.0.
+
 Read the complete [release highlights](RELEASE_HIGHLIGHTS.md), the exhaustive
 [changelog](CHANGELOG.md), or the signed artifacts on
 [GitHub Releases](https://github.com/MarcoPorcellato/logseq-matryca-parser/releases).
 
-- **v1.8.2 (release candidate)** — Adds SHA-pinned hosted assurance, portable Windows local assurance, corrected cookbook recipes, consistent optional-AI guidance, and `Path | str` graph loading.
+- **v1.9.0** — Adds the stable in-memory snapshot graph factory, clarifies the Parser-Plumber boundary, and governs the temporary optional-NLTK advisory exception.
+- **v1.8.2** — Adds SHA-pinned hosted assurance, portable Windows local assurance, corrected cookbook recipes, consistent optional-AI guidance, and `Path | str` graph loading.
 - **v1.8.1** — Hardened deep-outline parsing, coherent incremental graph mutations, bounded assurance cleanup, and stable provenance for optional NLTK.
 - **v1.8.0** — Added bounded privacy-safe local graph assurance, source-location contracts, and the first internal parser line-classification phase.
 - **v1.7.1** — Added the runnable offline SYNAPSE RAG example and tightened release-note and optional-dependency security checks.

{logseq_matryca_parser-1.8.2 → logseq_matryca_parser-1.10.0}/README.md

@@ -46,9 +46,11 @@ selected by the caller.
 ### Choose your workflow
 
 - **Parse and query:** load one page or a complete vault as a typed AST and graph.
-- **Build RAG context:** export LangChain documents, LlamaIndex nodes, or enriched chunks.
+- **Build RAG context:** export LangChain documents and enriched chunks; use
+  the separate LlamaIndex companion when available.
 - **Move knowledge:** generate JSON, clean Markdown, or an Obsidian vault.
-- **Visualize:** render an interactive graph with LENS.
+- **Visualize:** render an interactive reference-topology graph with the transitional,
+  feature-frozen LENS adapter.
 - **Use an AI agent:** start from [`AGENTS.md`](AGENTS.md) or the concise [`llms.txt`](llms.txt) index.
 
 ---
@@ -68,7 +70,16 @@ The PKM (Personal Knowledge Management) world is currently forcing users to make
 ### 🔱 The Matryca Solution: The Best of Both Worlds
 **Logseq Matryca Parser** is the ultimate bridge. It allows you to **keep your sovereign, future-proof Markdown files**, while synthesizing a **Virtual Global Graph** in RAM at runtime.
 
-It acts as the strict **File System Driver** for your LLM OS. By using a deterministic Stack-Machine to parse your outliner topology, it feeds LangChain or LlamaIndex with the exact parent-child context of every single block.
+It acts as the strict **File System Driver** for your LLM OS. A deterministic
+Stack-Machine parses outliner topology and preserves each block's parent-child
+context for LangChain and, through a separate optional companion, LlamaIndex.
+
+The Parser's `[ai]` and `[all]` extras do not install LlamaIndex. The
+`logseq-matryca-parser-llamaindex` companion is planned but not yet published
+on PyPI; until then, `SynapseAdapter.to_llamaindex_nodes()` reports that the
+companion is unavailable. The Parser lock and distributions no longer include
+`llama-index-core` or NLTK. This removes that dependency chain from Parser; it
+does not claim that the separate NLTK advisory is fixed for other consumers.
 
 *You get the reasoning power of a centralized relational database, without sacrificing the plain-text soul of your Second Brain in Logseq.*
 
@@ -141,12 +152,19 @@ Logseq Matryca Parser is a deterministic **Stack-Machine engine** that acts as t
 | :--- | :--- |
 | **Parse faithfully — LOGOS** | Deterministic AST parsing for outlines, YAML and native properties, tasks, temporal markers, references, assets, code/math/query shields, stable UUIDs, line ranges, and format-preserving round trips. |
 | **Understand the vault — Graph** | Canonical pages, aliases, backlinks, inherited properties, case-insensitive lookup, namespace resolution, fluent queries, broken-reference diagnostics, and optional per-file live reloads. |
-| **Export and integrate — SYNAPSE, FORGE, LENS** | Lineage-aware LangChain and LlamaIndex exports, context-enriched chunks, JSON and Markdown serialization, Obsidian vault generation, and interactive graph visualization. |
+| **Export and integrate — SYNAPSE, FORGE, LENS** | Lineage-aware LangChain exports and context-enriched chunks; LlamaIndex nodes through a separate companion; JSON and Markdown serialization, Obsidian vault generation, and interactive graph visualization. |
 | **Automate safely — KINETIC and agent tools** | CLI parse, scan, export, and visualization; token-efficient X-Ray reads; append-only logging; bounded AST writes; vault containment, dry-run patches, and atomic replacement. |
 
 The base parser is local-first and has zero telemetry. Optional AI, watcher, and
 visualization dependencies remain lazy. See the [architecture](docs/ARCHITECTURE.md)
 and [API stability reference](docs/reference/API_STABILITY.md) for exact boundaries.
+For cross-product Logseq OG use, Plumber is the gateway to Trama and Brain;
+Parser remains the deterministic parsing stage. LENS stays compatible while a
+future Trama graph-intelligence migration is separately designed and released.
+Stage 0 marks LENS as transitional and feature-frozen: `GraphVisualizer`,
+`matryca-parse visualize`, and `matryca-parse demo` remain available without a
+deprecation warning. Matryca Trama is the destination for future user-facing
+graph intelligence.
 
 ### Data model — `LogseqNode` task fields
 
@@ -178,7 +196,7 @@ uv sync --all-extras
 ```
 
 ```bash
-# 1. Visualize your local graph (LENS)
+# 1. Visualize your local graph (LENS: transitional, feature-frozen)
 matryca-parse visualize /path/to/logseq/graph my-map.html
 
 # 2. Export for AI / RAG (SYNAPSE)
@@ -217,6 +235,14 @@ graph = LogseqGraph.load_directory("/path/to/logseq/graph")
 page_obj = graph.get_page("My Page")  # case-insensitive
 effective = graph.get_effective_properties(page_obj.root_nodes[0].uuid)
 
+# Build the same in-memory indexes from caller-captured Markdown without filesystem access.
+from logseq_matryca_parser import SnapshotPage
+
+snapshot_graph = LogseqGraph.from_snapshot_pages(
+    "/path/to/logseq/graph",
+    [SnapshotPage("pages/Project.md", "- Captured block\n")],
+)
+
 # Export to LangChain with lineage metadata
 docs = SynapseAdapter.to_langchain_documents(page.root_nodes, source_name=page.title)
 
@@ -226,6 +252,14 @@ from logseq_matryca_parser import StackMachineParser
 strict_page = StackMachineParser(strict_refs=True).parse_page_file("page.md")
 ```
 
+`uv sync --extra ai` installs LangChain. `[all]` also installs the visualization
+dependencies. Neither extra installs LlamaIndex or NLTK. LlamaIndex export
+remains available through the `SynapseAdapter` compatibility method when the
+separate `logseq-matryca-parser-llamaindex` companion is installed. That
+companion is planned but not yet published on PyPI; see the
+[support matrix](docs/reference/CONFORMANCE_SUPPORT_MATRIX.md) for the current
+boundary. The Parser itself does not install `llama-index-core` or NLTK.
+
 ### 🤖 Agentic Write Access (Append-Only)
 
 Agents such as Hermes or OpenClaw can record structured notes into a Logseq graph **without rewriting existing pages**. The helper `logseq_agent_write` only **opens the weekly agent page in append mode** (`"a"`), writes a new bullet (journal link + optional tag links + body), and never truncates or replaces prior content—so routine logging cannot wipe blocks that already live in that file.
@@ -247,7 +281,9 @@ assert result["status"] == "success"
 ---
 
 ## 🗺️ Roadmap
-- [ ] **Desktop GUI:** Standalone app for non-technical users. [(Join the RFC)](https://github.com/MarcoPorcellato/logseq-matryca-parser/issues/3)
+- [ ] **Graph-intelligence UI:** A future Matryca Trama surface may succeed the
+  compatible Parser LENS workflow after a separately reviewed migration; Parser
+  does not commit to a standalone GUI. [(Track the historical RFC)](https://github.com/MarcoPorcellato/logseq-matryca-parser/issues/3)
 - [x] **Obsidian Adapter:** Native CLI export (`--format obsidian`) with YAML frontmatter and `^` block anchors.
 - [ ] **Ollama Integration:** One-click local RAG setup. [(RFC draft)](docs/rfc/OLLAMA_RAG.md) · [(Track progress #34)](https://github.com/MarcoPorcellato/logseq-matryca-parser/issues/34)
 
@@ -278,11 +314,15 @@ We welcome issues, pull requests, and constructive feedback.
 
 ## 📦 Release history
 
+Version 1.10.0 release notes are prepared, but the package has not yet been
+published to PyPI. The latest published release remains v1.9.0.
+
 Read the complete [release highlights](RELEASE_HIGHLIGHTS.md), the exhaustive
 [changelog](CHANGELOG.md), or the signed artifacts on
 [GitHub Releases](https://github.com/MarcoPorcellato/logseq-matryca-parser/releases).
 
-- **v1.8.2 (release candidate)** — Adds SHA-pinned hosted assurance, portable Windows local assurance, corrected cookbook recipes, consistent optional-AI guidance, and `Path | str` graph loading.
+- **v1.9.0** — Adds the stable in-memory snapshot graph factory, clarifies the Parser-Plumber boundary, and governs the temporary optional-NLTK advisory exception.
+- **v1.8.2** — Adds SHA-pinned hosted assurance, portable Windows local assurance, corrected cookbook recipes, consistent optional-AI guidance, and `Path | str` graph loading.
 - **v1.8.1** — Hardened deep-outline parsing, coherent incremental graph mutations, bounded assurance cleanup, and stable provenance for optional NLTK.
 - **v1.8.0** — Added bounded privacy-safe local graph assurance, source-location contracts, and the first internal parser line-classification phase.
 - **v1.7.1** — Added the runnable offline SYNAPSE RAG example and tightened release-note and optional-dependency security checks.

{logseq_matryca_parser-1.8.2 → logseq_matryca_parser-1.10.0}/RELEASE_HIGHLIGHTS.md

@@ -5,13 +5,32 @@ For the exhaustive change history, see the [changelog](CHANGELOG.md). For
 published artifacts and attestations, see
 [GitHub Releases](https://github.com/MarcoPorcellato/logseq-matryca-parser/releases).
 
-## v1.8.2 (release candidate)
+## Unreleased
 
-Release candidate — strengthens the hosted assurance boundary, clarifies
+The Parser is separating native LlamaIndex export into a companion package.
+The compatibility method remains, but the proposed companion is not yet
+published; Parser `[ai]` provides LangChain, while `[all]` also includes
+visualization dependencies. Neither extra installs LlamaIndex or NLTK. See
+the [support matrix](docs/reference/CONFORMANCE_SUPPORT_MATRIX.md) for the
+current boundary.
+
+## v1.9.0
+
+Minor release — adds a stable in-memory graph factory and clarifies the
+cross-product integration boundary. **No intentional breaking changes** to
+stable package imports or CLI behavior.
+
+| Area | Change |
+| :--- | :--- |
+| **Graph API** | `SnapshotPage` and `LogseqGraph.from_snapshot_pages()` build ordinary in-memory graph indexes from bounded caller-captured Markdown. The additive API never discovers, reopens, or inspects logical source paths or its graph-root label; source capture, revisions, and external DTO projection remain outside Parser. |
+| **Architecture** | Parser remains the deterministic Logseq OG library. Plumber is the sole cross-product gateway to Trama and Brain; existing Parser APIs and LENS behavior remain compatible. |
+| **Dependency security** | A time-bounded, evidence-backed exception governs `PYSEC-2026-3740` for optional AI dependency NLTK until a patched registry release exists; all other dependency findings remain fail-closed. |
+
+## v1.8.2
+
+Patch release — strengthens the hosted assurance boundary, clarifies
 integration guidance, and makes the graph loader easier to call. **No
-intentional breaking changes** to stable package imports or CLI behavior. The
-v1.8.2 tag, PyPI publication, GitHub Release, hashes, and attestations remain
-pending the release workflow.
+intentional breaking changes** to stable package imports or CLI behavior.
 
 | Area | Change |
 | :--- | :--- |

{logseq_matryca_parser-1.8.2 → logseq_matryca_parser-1.10.0}/SECURITY.md

@@ -2,13 +2,15 @@
 
 ## Supported Versions
 
-Security fixes are provided **only for the latest released version** on [PyPI](https://pypi.org/project/logseq-matryca-parser/). Until the v1.8.2 tag workflow completes, that version remains v1.8.1.
+Security fixes are provided **only for the latest released version** on [PyPI](https://pypi.org/project/logseq-matryca-parser/). The latest supported release is v1.9.0.
+
+Version 1.10.0 release preparation does not change this support status; it will
+do so only after publication to PyPI.
 
 | Version | Supported |
 | ------- | --------- |
-| 1.8.2 (release candidate; not published) | Pending publication |
-| **1.8.1** (latest released) | Yes |
-| 1.8.0 and older | No |
+| **1.9.0** (latest released) | Yes |
+| 1.8.2 and older | No |
 
 We recommend always running the current release and upgrading promptly when a security advisory is published.