v1.9.0

[1.9.0] - 2026-09-06

Added

• In-memory snapshot graph factory — SnapshotPage and
  LogseqGraph.from_snapshot_pages() build the existing parser graph indexes from
  bounded, caller-captured Markdown without source discovery, file reopening, or
  graph-root filesystem inspection.
  The stable additive API preserves deterministic ordering, parser identities,
  aliases, backlinks, diagnostics, and opt-in strict modes while keeping source
  capture and cross-product projection outside Parser (#209).

Security

• Time-bounded NLTK advisory exception — document the exact optional AI
  dependency exposure, non-reachability evidence, compensating controls,
  owner, upstream advisory, and 2026-10-05 expiry for PYSEC-2026-3740 while
  no patched NLTK registry release exists. CI and release audits ignore only
  that advisory; all other dependency findings remain fail-closed.

Changed

• LENS Stage 0 transition — mark the compatible GraphVisualizer,
  visualize, and demo surfaces as transitional and feature-frozen, with
  Matryca Trama as future user-facing graph-intelligence destination. This
  release makes no API removal or deprecation-warning change (#213).
• Parser-Plumber boundary — record Parser as the deterministic Logseq OG
  parsing library and Plumber as the sole cross-product Logseq gateway to
  Trama and Brain. Existing Parser APIs and LENS behavior remain compatible;
  any Trama UI migration requires a later, separately reviewed compatible
  deprecation plan (#203).