@remnic/core 1.1.1 → 1.1.3

package/dist/index.d.ts

@@ -1,26 +1,30 @@
 export { LEGACY_PLUGIN_ID, PLUGIN_ID, resolveRemnicPluginEntry } from './plugin-id.js';
 export { parseConfig } from './config.js';
-import { f as BulkImportSourceAdapter, b as ImportTurn } from './orchestrator-CmJ-NTdJ.js';
-export { g as BulkImportError, c as BulkImportOptions, d as BulkImportResult, B as BulkImportSource, h as ImportSourceRole, i as ImportTurnValidationIssue, O as Orchestrator, j as SemanticDedupDecision, k as SemanticDedupHit, S as SemanticDedupLookup, l as SemanticDedupOptions, m as decideSemanticDedup, n as defaultWorkspaceDir, o as isImportRole, p as parseIsoTimestamp, s as sanitizeSessionKeyForFilename, v as validateImportTurn } from './orchestrator-CmJ-NTdJ.js';
+import { f as BulkImportSourceAdapter, b as ImportTurn } from './orchestrator-ChkesB8U.js';
+export { g as BulkImportError, c as BulkImportOptions, d as BulkImportResult, B as BulkImportSource, h as ImportSourceRole, i as ImportTurnValidationIssue, O as Orchestrator, j as SemanticDedupDecision, k as SemanticDedupHit, S as SemanticDedupLookup, l as SemanticDedupOptions, m as decideSemanticDedup, n as defaultWorkspaceDir, o as isImportRole, p as parseIsoTimestamp, s as sanitizeSessionKeyForFilename, v as validateImportTurn } from './orchestrator-ChkesB8U.js';
+export { EvidencePackItem, EvidencePackOptions, buildEvidencePack } from './evidence-pack.js';
 import { StorageManager } from './storage.js';
 export { ExtractionEngine } from './extraction.js';
 export { BufferSurpriseProbe, SmartBuffer, TriggerDecision } from './buffer.js';
 export { ComputeSurpriseOptions, DEFAULT_SURPRISE_K, RecentMemoryLike, computeSurprise } from './buffer-surprise.js';
 export { BufferSurpriseDistribution, BufferSurpriseReader, BufferSurpriseReportOptions, reportBufferSurpriseDistribution } from './buffer-surprise-report.js';
 import { PluginConfig, CodingContext, CodingModeConfig, MemoryFile, MemoryCategory, ImportanceLevel } from './types.js';
-export { BriefingActiveThread, BriefingConfig, BriefingFocus, BriefingFollowup, BriefingOpenCommitment, BriefingRecentEntity, BriefingResult, BriefingSections, BriefingWindow, BufferSurpriseEvent, CalendarEvent, CalendarSource, CodexCompatConfig, ContinuityImprovementLoop, GatewayConfig, MemoryActionEligibilityContext, MemoryActionEligibilitySource, MemoryActionType } from './types.js';
+export { AgentAccessAuthToken, BriefingActiveThread, BriefingConfig, BriefingFocus, BriefingFollowup, BriefingOpenCommitment, BriefingRecentEntity, BriefingResult, BriefingSections, BriefingWindow, BufferSurpriseEvent, CalendarEvent, CalendarSource, CodexCompatConfig, ContinuityImprovementLoop, DEFAULT_RECALL_DISCLOSURE, ExtractedFact, GatewayConfig, MemoryActionEligibilityContext, MemoryActionEligibilitySource, MemoryActionType, MemoryObservation, MemoryScope, RECALL_DISCLOSURE_LEVELS, RecallDisclosure, SecretRef, isRecallDisclosure } from './types.js';
 export { JudgeBatchResult, JudgeCandidate, JudgeVerdict, JudgeVerdictKind, clearVerdictCache, createVerdictCache, getVerdictKind, isDurableVerdict, isValidCachedVerdict, judgeFactDurability, normalizeCachedVerdict, verdictCacheSize } from './extraction-judge.js';
 export { hasBroadGraphIntent, inferIntentFromText, intentCompatibilityScore, isTaskInitiationIntent, planRecallMode } from './intent.js';
-export { a as EngramAccessInputError, E as EngramAccessService, P as ProcedureStatsConfigSnapshot, b as ProcedureStatsRecent, c as ProcedureStatsReport, d as ProcedureStatusCounts, e as computeProcedureStats, f as formatProcedureStatsText } from './access-service-Br8ZydTK.js';
+import { P as PeerInteractionLogEntry, a as Peer, b as PeerProfile, c as ExportManifestV2, I as ImportCapsuleResult, C as CapsuleParent } from './access-service-_AEUMVyX.js';
+export { d as EngramAccessInputError, E as EngramAccessService, e as PEER_ID_MAX_LENGTH, f as PEER_ID_PATTERN, g as PeerKind, h as PeerProfileFieldProvenance, i as ProcedureStatsConfigSnapshot, j as ProcedureStatsRecent, k as ProcedureStatsReport, l as ProcedureStatusCounts, m as computeProcedureStats, n as formatProcedureStatsText } from './access-service-_AEUMVyX.js';
 export { FILTER_LABELS as DIRECT_ANSWER_FILTER_LABELS, DirectAnswerCandidate, DirectAnswerConfig, DirectAnswerInput, DirectAnswerReason, DirectAnswerResult, isDirectAnswerEligible } from './direct-answer.js';
+export { MemoryTier, TierRoutingPolicy, TierTransitionDecision, computeTierValueScore, decideTierTransition } from './tier-routing.js';
 export { ApplyReasoningTraceBoostOptions, BoostableResult, DEFAULT_REASONING_TRACE_BOOST, applyReasoningTraceBoost, isReasoningTracePath, looksLikeProblemSolvingQuery } from './reasoning-trace-recall.js';
 export { CITATION_UNKNOWN, CitationContext, DEFAULT_CITATION_FORMAT, ParsedCitation, attachCitation, deriveSessionId, formatCitation, hasCitation, parseAllCitations, parseCitation, stripCitation } from './source-attribution.js';
 export { QmdClient } from './qmd.js';
-import { S as SearchBackend, a as SearchQueryOptions, b as SearchExecutionOptions, c as SearchResult } from './port-BADbLZU5.js';
+import { S as SearchBackend, a as SearchQueryOptions, b as SearchExecutionOptions, c as SearchResult } from './port-hqGnoStS.js';
 export { buildEntityRecallSection } from './entity-retrieval.js';
 export { TrustZoneName, TrustZoneRecord, TrustZoneRecordKind, TrustZoneSourceClass, isTrustZoneName } from './trust-zones.js';
 export { EngramAccessHttpServer } from './access-http.js';
 export { EngramMcpServer } from './access-mcp.js';
+export { ResolveSecretRefFn, clearAuthTokenSecretCache, isAgentAccessSecretRef, resolveAgentAccessAuthToken } from './resolve-auth-token.js';
 export { ParsedXrayCliOptions, parseXrayBudgetFlag, parseXrayCliOptions } from './recall-xray-cli.js';
 export { RECALL_XRAY_FORMATS, RecallXrayFormat, parseXrayFormat, renderXray, renderXrayJson, renderXrayMarkdown, renderXrayText } from './recall-xray-renderer.js';
 export { RecallFilterTrace, RecallXrayResult, RecallXrayScoreDecomposition, RecallXrayServedBy, RecallXraySnapshot } from './recall-xray.js';
@@ -34,14 +38,18 @@ export { PageVersion, VersionHistory, VersionTrigger, VersioningConfig, Versioni
 export { CitationBlock, CitationEntry, CitationMetadata, buildCitationGuidance, formatOaiMemCitation, parseOaiMemCitation, sanitizeNoteForCitation } from './citations.js';
 import { LoggerBackend } from './logger.js';
 export { initLogger, log } from './logger.js';
-import { D as DiscoveredExtension } from './semantic-consolidation-CxJU6MJk.js';
-export { E as ExtensionSchema, R as REMNIC_EXTENSIONS_TOTAL_TOKEN_LIMIT, b as buildExtensionsBlockForConsolidation, d as discoverMemoryExtensions, r as resolveExtensionsRoot } from './semantic-consolidation-CxJU6MJk.js';
+import { D as DiscoveredExtension } from './semantic-consolidation-ByBXb-sf.js';
+export { E as ExtensionSchema, R as REMNIC_EXTENSIONS_TOTAL_TOKEN_LIMIT, b as buildExtensionsBlockForConsolidation, d as discoverMemoryExtensions, r as resolveExtensionsRoot } from './semantic-consolidation-ByBXb-sf.js';
+import { L as LiveConnector, S as SyncIncrementalResult } from './framework-CyHYDcri.js';
+export { c as CONNECTOR_ID_PATTERN, C as ConnectorConfig, b as ConnectorCursor, a as ConnectorDocument, d as ConnectorDocumentSource, e as SyncIncrementalArgs, i as isValidConnectorId } from './framework-CyHYDcri.js';
+export { C as CONNECTORS_OUTPUT_FORMATS, a as ConnectorRow, b as ConnectorRunResult, c as ConnectorState, d as ConnectorSyncStatus, e as ConnectorsOutputFormat, P as ParsedConnectorsListOptions, f as ParsedConnectorsStatusOptions, R as RunConnectorPollOnceArgs, l as listConnectorStates, p as parseConnectorsFormat, g as parseConnectorsListOptions, h as parseConnectorsRunName, i as parseConnectorsStatusOptions, r as readConnectorState, j as renderConnectorsList, k as renderConnectorsRunResult, m as runConnectorPollOnce, w as writeConnectorState } from './connectors-cli-DFGtY2DB.js';
+export { LiveConnectorDefinition, LiveConnectorRunItem, LiveConnectorSkipReason, LiveConnectorsRunSummary, builtInLiveConnectorDefinitions, hasEnabledLiveConnector, runLiveConnectorsOnce } from './live-connectors-runner.js';
 export { TokenEntry, TokenStore, generateToken, getAllValidTokens, getAllValidTokensCached, listTokens, loadTokenStore, resolveConnectorFromToken, revokeToken, saveTokenStore } from './tokens.js';
 import { R as RolloutSummaryInput, M as MaterializeResult } from './codex-materialize-CQlLTzke.js';
 export { a as MATERIALIZE_VERSION, b as MaterializeOptions, S as SENTINEL_FILE, d as describeMemoriesDir, e as ensureSentinel, m as materializeForNamespace } from './codex-materialize-CQlLTzke.js';
 import { T as Taxonomy, R as ResolverDecision } from './types-DJhqDJUV.js';
 export { a as TaxonomyCategory } from './types-DJhqDJUV.js';
-export { B as BulkImportCliCommandOptions, P as ProcessBatchFn, a as ProcessBatchResult, f as formatBatchTranscript, p as parseStrictCliDate, r as runBulkImportCliCommand, b as runBulkImportPipeline } from './cli-BkeRaYfk.js';
+export { B as BulkImportCliCommandOptions, P as ProcessBatchFn, a as ProcessBatchResult, f as formatBatchTranscript, p as parseStrictCliDate, r as runBulkImportCliCommand, b as runBulkImportPipeline } from './cli-x2APT9a6.js';
 export { FallbackLlmClient, FallbackLlmOptions, FallbackLlmResponse, FallbackLlmRuntimeContext } from './fallback-llm.js';
 export { ComputeMemoryWorthInput, MemoryWorthResult, computeMemoryWorth } from './memory-worth.js';
 export { MemoryOutcomeKind, RecordMemoryOutcomeInput, RecordMemoryOutcomeResult, memoryWorthOutcomeEligibleCategories, recordMemoryOutcome } from './memory-worth-outcomes.js';
@@ -65,17 +73,20 @@ import 'zod';
 import './policy-runtime.js';
 import './profiling.js';
 import './consolidation-operator.js';
-import './memory-projection-store-DeSXPh1j.js';
+import './memory-projection-store-D3vBHS4J.js';
 import 'better-sqlite3';
 import './schemas.js';
 import './recall-explain-renderer.js';
 import './explicit-capture.js';
+import './graph-snapshot.js';
+import './graph.js';
+import './capsule-cli.js';
+import './lifecycle.js';
 import 'node:http';
 import './recall-audit.js';
 import 'node:stream';
 import './dashboard-runtime.js';
 import './evals.js';
-import './graph.js';
 import './causal-trajectory.js';
 import './objective-state.js';
 import './abstraction-nodes.js';
@@ -91,6 +102,343 @@ import './utility-learner.js';
 import './resume-bundles.js';
 import './semantic-rule-promotion.js';
 
+/**
+ * @remnic/core — Live Connectors Registry (issue #683 PR 1/N)
+ *
+ * Pure in-memory registry. No I/O. Concrete connectors register themselves at
+ * orchestrator boot (later PRs); the maintenance scheduler asks the registry
+ * for the active set when running due syncs.
+ */
+
+/**
+ * Thrown when registering a duplicate id or an id that fails validation.
+ *
+ * Distinct error class so callers can distinguish framework-level mistakes
+ * (which are programmer errors) from connector-runtime failures.
+ */
+declare class LiveConnectorRegistryError extends Error {
+    constructor(message: string);
+}
+/**
+ * In-memory registry of live connectors. One instance per orchestrator. Not
+ * safe for cross-process sharing — wire each process to its own registry.
+ */
+declare class LiveConnectorRegistry {
+    private readonly connectors;
+    /**
+     * Register a connector. Throws `LiveConnectorRegistryError` if the id is
+     * malformed or already registered.
+     *
+     * Re-registration is rejected (rather than silently overwriting) because
+     * silent overwrites mask plugin loading bugs in development and could let
+     * a malicious extension shadow a built-in connector.
+     */
+    register(connector: LiveConnector): void;
+    /**
+     * Look up a connector by id. Returns `undefined` if not registered.
+     */
+    get(id: string): LiveConnector | undefined;
+    /**
+     * Return all registered connectors, sorted by id for stable enumeration.
+     */
+    list(): LiveConnector[];
+    /**
+     * Remove a connector. Returns `true` if a connector was removed, `false`
+     * otherwise. The cursor / state file on disk is **not** touched — callers
+     * who want to fully decommission a connector must also delete its state
+     * file via the `state-store` module.
+     */
+    unregister(id: string): boolean;
+    /**
+     * Number of registered connectors. Cheap; safe to call frequently.
+     */
+    size(): number;
+}
+
+/**
+ * @remnic/core — Google Drive live connector (issue #683 PR 2/N)
+ *
+ * Concrete `LiveConnector` implementation that incrementally imports text
+ * content from a user's Google Drive into Remnic. Built on top of the
+ * framework shipped in PR 1/N (`framework.ts` / `registry.ts` /
+ * `state-store.ts`).
+ *
+ * Design notes:
+ *
+ *   - **Cursor semantics.** We page Drive with the official `changes` API
+ *     when a `startPageToken` is available. The cursor is opaque from the
+ *     framework's POV (`{kind: "drivePageToken", value: ...}`), and on the
+ *     very first sync (cursor=null) we call `changes.getStartPageToken()`
+ *     to seed it without importing anything. This matches the documented
+ *     Drive incremental-sync recipe and means re-runs never re-ingest the
+ *     same file as long as the cursor file survives.
+ *
+ *   - **Folder scope.** When `folderIds` is non-empty, files are filtered
+ *     to those whose `parents` intersect the configured folder set. Drive
+ *     does not currently support server-side parent filtering on the
+ *     `changes.list` endpoint, so we pull the change record's `file` payload
+ *     and apply the filter on our side. Folder ids are validated up front so
+ *     a typo in config doesn't silently cause a broad import.
+ *
+ *   - **Content extraction.** Google-native MIME types
+ *     (`application/vnd.google-apps.{document,spreadsheet,presentation}`)
+ *     are exported via `files.export` to plaintext. Plain-text MIME types
+ *     are pulled with `files.get?alt=media`. Everything else is skipped —
+ *     bytes from binary formats (images, PDFs, archives) belong in the
+ *     binary-lifecycle pipeline, not in the textual ingestion path.
+ *
+ *   - **Idempotency.** Each emitted `ConnectorDocument.source` carries
+ *     `externalId = file.id` plus `externalRevision = file.modifiedTime`,
+ *     so downstream dedup (CLAUDE.md gotcha #44 — never index content that
+ *     failed to persist) can recognise repeat fetches even if the cursor is
+ *     manually rewound.
+ *
+ *   - **Privacy.** No document content is ever logged. Folder ids and
+ *     counts may be logged. OAuth credentials (`clientId`,
+ *     `clientSecret`, `refreshToken`) are accepted via config but the
+ *     intent is for callers to populate them from a secret store; we never
+ *     persist credentials through the connector state-store. Per CLAUDE.md
+ *     repository-privacy rules, no real credentials may appear in tests,
+ *     fixtures, or comments.
+ *
+ *   - **À-la-carte packaging (CLAUDE.md gotcha #57).** `googleapis` is NOT
+ *     listed as a hard dependency of `@remnic/core`. It is loaded via a
+ *     computed-specifier dynamic import (`await import("google" + "apis")`)
+ *     so bundlers cannot statically resolve it, and it is declared as an
+ *     optional peer dependency. Operators who never enable the connector
+ *     pay nothing for it.
+ *
+ *   - **Read-only.** This connector only reads. It never marks files as
+ *     read, edits metadata, or modifies sharing settings.
+ */
+
+/**
+ * Stable connector id. Lives in the registry under this exact string.
+ */
+declare const GOOGLE_DRIVE_CONNECTOR_ID = "google-drive";
+/**
+ * Cursor `kind` we emit. Treated as opaque by the framework; documented
+ * here so tests can assert on it.
+ */
+declare const GOOGLE_DRIVE_CURSOR_KIND = "drivePageToken";
+/**
+ * Default poll interval (5 minutes). Surfaced in `openclaw.plugin.json`
+ * defaults and in the documented config schema. Drive's `changes.list`
+ * endpoint is cheap, but polling sub-minute is wasteful for a personal
+ * memory layer.
+ */
+declare const DEFAULT_POLL_INTERVAL_MS: number;
+/**
+ * Validated, frozen view of `connectors.googleDrive.*`.
+ */
+interface GoogleDriveConnectorConfig {
+    readonly clientId: string;
+    readonly clientSecret: string;
+    readonly refreshToken: string;
+    /** Poll interval surfaced to the scheduler. */
+    readonly pollIntervalMs: number;
+    /** Folder ids to scope import to. Empty = "all accessible". */
+    readonly folderIds: readonly string[];
+}
+/**
+ * Optional injection point for tests. The real connector dynamically imports
+ * `googleapis`; tests pass a stub here to avoid the optional-peer-dep
+ * machinery and to keep the test suite hermetic.
+ *
+ * The shape only covers the tiny slice of the SDK we actually use.
+ */
+interface GoogleDriveClientFactory {
+    (config: GoogleDriveConnectorConfig): Promise<GoogleDriveClient>;
+}
+/**
+ * Minimal Drive client surface. Tests provide a fake; production wraps
+ * `googleapis` to fit. Method shapes mirror the upstream API where it
+ * matters (`startPageToken` / `nextPageToken` / `newStartPageToken`,
+ * `files.modifiedTime` ISO 8601 strings).
+ */
+interface GoogleDriveClient {
+    /** Mirrors `drive.changes.getStartPageToken()`. */
+    getStartPageToken(): Promise<{
+        startPageToken: string;
+    }>;
+    /**
+     * Mirrors `drive.changes.list(...)`. We page until the response yields a
+     * `newStartPageToken` (i.e., no more pages). Each `change.file`, when
+     * present, includes the metadata we need to decide whether to ingest.
+     */
+    listChanges(args: {
+        pageToken: string;
+        pageSize: number;
+    }): Promise<DriveChangesPage>;
+    /**
+     * Export a Google-native doc to plaintext. Returns the body as a string.
+     */
+    exportFile(args: {
+        fileId: string;
+        mimeType: string;
+    }): Promise<string>;
+    /**
+     * Download a non-Google-native file as a string. Used for `text/*` MIME
+     * types; binary formats are filtered out before we get here.
+     */
+    getFileMedia(args: {
+        fileId: string;
+    }): Promise<string>;
+}
+interface DriveChangesPage {
+    readonly changes: readonly DriveChange[];
+    readonly newStartPageToken?: string;
+    readonly nextPageToken?: string;
+}
+interface DriveChange {
+    readonly removed?: boolean;
+    readonly fileId?: string;
+    readonly file?: DriveFileMetadata;
+}
+interface DriveFileMetadata {
+    readonly id: string;
+    readonly name?: string;
+    readonly mimeType?: string;
+    readonly modifiedTime?: string;
+    readonly trashed?: boolean;
+    readonly parents?: readonly string[];
+    readonly webViewLink?: string;
+    readonly size?: string | number;
+}
+/**
+ * Result of a single sync pass — exposed for richer test assertions.
+ * Strict superset of `SyncIncrementalResult`.
+ */
+interface GoogleDriveSyncResult extends SyncIncrementalResult {
+    readonly skippedBinary: number;
+    readonly skippedFolderScope: number;
+    readonly skippedTooLarge: number;
+}
+/**
+ * Validate and normalise raw config. Throws with a concrete message on any
+ * malformed input — never silently defaults (CLAUDE.md gotcha #51).
+ */
+declare function validateGoogleDriveConfig(raw: unknown): GoogleDriveConnectorConfig;
+/**
+ * Construct the connector. The `clientFactory` argument is the test hook —
+ * production callers omit it and the connector lazy-loads `googleapis`.
+ */
+declare function createGoogleDriveConnector(options?: {
+    clientFactory?: GoogleDriveClientFactory;
+}): LiveConnector;
+/**
+ * Production client factory. Lazy-loads `googleapis` via a computed-specifier
+ * dynamic import so bundlers never statically resolve it (CLAUDE.md gotcha
+ * #57). Surfaces a precise install hint on miss.
+ *
+ * Exported only for the `index.ts` barrel; consumers that already inject a
+ * test factory don't need to touch this.
+ */
+declare const defaultGoogleDriveClientFactory: GoogleDriveClientFactory;
+
+/**
+ * @remnic/core — Notion live connector (issue #683 PR 3/N)
+ *
+ * Concrete `LiveConnector` implementation that incrementally imports text
+ * content from Notion database pages into Remnic. Built on top of the
+ * framework shipped in PR 1/N (`framework.ts` / `registry.ts` /
+ * `state-store.ts`) and mirrors the structure of the Google Drive connector
+ * (PR 2/N).
+ *
+ * Design notes:
+ *
+ *   - **Auth.** Integration token from config (`connectors.notion.token`).
+ *     The token is accepted at config-parse time but never logged. Operators
+ *     must populate it from a secret store; per the repo-wide privacy policy
+ *     no real value may appear in tests or comments.
+ *
+ *   - **Scope.** `databaseIds` in config limits the import to the listed
+ *     Notion databases. The connector queries each database for pages whose
+ *     `last_edited_time` is after a per-page high-water mark stored in the
+ *     cursor. When `databaseIds` is empty the connector does nothing (safe
+ *     default — no credentials → no import).
+ *
+ *   - **Cursor semantics.** The cursor is a JSON string encoding a
+ *     `NotionCursorPayload`: a map from page-id to last-seen
+ *     `last_edited_time` ISO string. On the first sync (cursor=null) we
+ *     seed the payload from the current state of each database WITHOUT
+ *     importing any content, so "first install" doesn't re-ingest history.
+ *     Each subsequent pass only imports pages edited after the stored
+ *     watermark.
+ *
+ *   - **Block extraction.** Page content is fetched via
+ *     `blocks.children.list` recursively up to `MAX_BLOCK_DEPTH` levels.
+ *     Block text is extracted to Markdown-ish plain text (no raw JSON blobs).
+ *     Only text-bearing block types are included; unsupported types are
+ *     silently skipped.
+ *
+ *   - **Raw `fetch`.** We call the Notion REST API directly rather than using
+ *     `@notionhq/client` — there is no optional-peer-dep machinery needed and
+ *     the API surface we consume is tiny. The `fetchFn` argument is the test
+ *     hook allowing stubbing without network access.
+ *
+ *   - **Idempotency.** `ConnectorDocument.source.externalId` is the page id
+ *     and `externalRevision` is `last_edited_time`, so downstream dedup can
+ *     recognise repeat fetches if the cursor is rewound.
+ *
+ *   - **Privacy.** No page content is ever logged. Database ids and counts
+ *     may be logged. The integration token is never exposed in logs, state,
+ *     or error messages.
+ *
+ *   - **Read-only.** This connector only reads. It never modifies pages,
+ *     databases, or any other Notion resource.
+ */
+
+/** Stable connector id. Lives in the registry under this exact string. */
+declare const NOTION_CONNECTOR_ID = "notion";
+/**
+ * Cursor `kind` we emit. Opaque to the framework; documented here so
+ * tests can assert on it.
+ */
+declare const NOTION_CURSOR_KIND = "notionWatermark";
+/**
+ * Default poll interval (5 minutes). Notion's API has no push capability;
+ * polling sub-minute wastes quota for a personal memory layer.
+ */
+declare const NOTION_DEFAULT_POLL_INTERVAL_MS: number;
+/**
+ * Validated, frozen view of `connectors.notion.*`.
+ */
+interface NotionConnectorConfig {
+    /** Notion integration token. Starts with `secret_`. */
+    readonly token: string;
+    /** Database ids to import pages from. Empty = connector is a no-op. */
+    readonly databaseIds: readonly string[];
+    /** Poll interval surfaced to the scheduler (ms). */
+    readonly pollIntervalMs: number;
+}
+/**
+ * Minimal fetch-compatible surface we use. The real connector delegates to
+ * the global `fetch`; tests inject a stub factory.
+ */
+type NotionFetchFn = (url: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body?: string;
+    signal?: AbortSignal;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    json(): Promise<unknown>;
+}>;
+/**
+ * Validate and normalise raw config. Throws with a concrete message on any
+ * malformed input — never silently defaults (CLAUDE.md gotcha #51).
+ */
+declare function validateNotionConfig(raw: unknown): NotionConnectorConfig;
+/**
+ * Construct the connector. The `fetchFn` argument is the test hook —
+ * production callers omit it and the connector uses the global `fetch`.
+ */
+declare function createNotionConnector(options?: {
+    fetchFn?: NotionFetchFn;
+}): LiveConnector;
+
 /**
  * memory-extension-host/render-extensions-block.ts — Render discovered extensions
  * into a markdown block for injection into consolidation prompts.
@@ -534,8 +882,15 @@ declare function branchNamespaceName(projectId: string, branch: string): string;
  * existing `defaultNamespaceForPrincipal(...)` result unchanged. This keeps
  * CLAUDE.md #30 (escape hatch): setting `codingMode.projectScope: false`
  * exactly restores pre-#569 behaviour at every call site.
+ *
+ * @param codingContext — git context from the connector
+ * @param config — coding mode flags (projectScope, branchScope, globalFallback)
+ * @param defaultNamespace — retained for call-site compatibility; no longer
+ *   used. The global fallback is expressed as an empty-string sentinel in
+ *   `readFallbacks`, which `combineNamespaces(principal, "")` resolves to the
+ *   principal's own namespace at the call site.
  */
-declare function resolveCodingNamespaceOverlay(codingContext: CodingContext | null | undefined, config: Pick<CodingModeConfig, "projectScope" | "branchScope">): CodingNamespaceOverlay | null;
+declare function resolveCodingNamespaceOverlay(codingContext: CodingContext | null | undefined, config: Pick<CodingModeConfig, "projectScope" | "branchScope" | "globalFallback">, defaultNamespace?: string): CodingNamespaceOverlay | null;
 interface CodingScopeDescription {
     /** "none" when no overlay is active; otherwise the resolved scope level. */
     scope: "none" | "project" | "branch";
@@ -562,7 +917,7 @@ interface CodingScopeDescription {
  *
  * Pure — callers pass the coding context + config they already have.
  */
-declare function describeCodingScope(codingContext: CodingContext | null | undefined, config: Pick<CodingModeConfig, "projectScope" | "branchScope">): CodingScopeDescription;
+declare function describeCodingScope(codingContext: CodingContext | null | undefined, config: Pick<CodingModeConfig, "projectScope" | "branchScope" | "globalFallback">, defaultNamespace?: string): CodingScopeDescription;
 
 /**
  * Diff-aware review-context packer (issue #569 PR 4).
@@ -2503,4 +2858,198 @@ declare function clearTrainingExportAdapters(): void;
  */
 declare function convertMemoriesToRecords(options: TrainingExportOptions): Promise<TrainingExportRecord[]>;
 
-export { type AuditEntry, type BinaryAssetRecord, type BinaryAssetStatus, type BinaryLifecycleConfig, type BinaryLifecycleManifest, type BinaryStorageBackend, type BinaryStorageBackendConfig, BulkImportSourceAdapter, ClaudeCodeMemoryExtensionPublisher, CodexMemoryExtensionPublisher, type CodingNamespaceOverlay, type CodingScopeDescription, type ConflictEntry, type ConnectorCapability, type ConnectorInstance, type ConnectorManifest, type ConnectorRegistry, type ContradictionOptions, type ContradictionPair, type ContradictionResult$1 as CurateContradictionResult, type DuplicateResult as CurateDuplicateResult, type CurateOptions, type CurateResult, type CuratedStatement, DEFAULT_GRACE_PERIOD_DAYS, DEFAULT_IMPORT_BATCH_SIZE, DEFAULT_MAX_BINARY_SIZE_BYTES, DEFAULT_SCAN_PATTERNS, DEFAULT_TAXONOMY, type DedupOptions, type DedupResult, DiscoveredExtension, type DocFile, type DoctorCheck, type DoctorResult, type DuplicatePair, type EnrichmentAuditEntry, type EnrichmentCandidate, type EnrichmentCostTier, type EnrichmentPipelineConfig, type EnrichmentProvider, type EnrichmentProviderConfig, EnrichmentProviderRegistry, type EnrichmentResult, type EntityEnrichmentInput, type FileChange, FilesystemBackend, type GenerateOptions, type GenerateResult, type GitContext, type GitInvoker, HermesMemoryExtensionPublisher, type ImportProgress, ImportTurn, type ImportedMemory, type ImporterAdapter, type ImporterParseOptions, type ImporterTransformOptions, type ImporterWriteResult, type ImporterWriteTarget, type IngestionPlan, type InstallOptions, type InstallResult, LanceDbBackend, type LanguageInfo, MARKETPLACE_MANIFEST_FILENAME, MARKETPLACE_SCHEMA_VERSION, type MarketplaceConfig, type MarketplaceEntry, type MarketplaceInstallResult, type MarketplaceInstallType, type MarketplaceLogger, type MarketplaceManifest, type MarketplaceValidation, MaterializeResult, MeilisearchBackend, MemoryCategory, type MemoryEntry, type MemoryExtensionPublisher, MemoryFile, type MergeResult, type MigrationOptions, type MigrationResult, NoneBackend, type OnboardOptions, type OnboardResult, OramaBackend, PUBLISHERS, type PipelineResult, PluginConfig, type PostConsolidationMaterializeOptions, type ProjectShape, type ProvenanceEntry, type PublishContext, type PublishResult, type PublisherCapabilities, REMNIC_CITATION_FORMAT, REMNIC_MCP_TOOL_INVENTORY, REMNIC_RECALL_DECISION_RULES, REMNIC_SEMANTIC_OVERVIEW, type RemoveResult, ResolverDecision, type ReviewAction, type ReviewCandidate, type ReviewContext, type ReviewItem, type ReviewListResult, type ReviewOptions, type ReviewResult, type RollbackResult, RolloutSummaryInput, type RunImportOptions, type RunImporterResult, type RunMaterializeOptions, type Space, type SpaceKind, type SpaceManifest, type SpacePromoteResult, type SpacePullResult, type SpacePushResult, type SpaceShareResult, type SpaceSwitchResult, type StatementProvenance, StorageManager, type SyncOptions, type SyncResult, type SyncState, Taxonomy, type TrainingExportAdapter, type TrainingExportOptions, type TrainingExportRecord, type TreeNode, type WebSearchFn, WebSearchProvider, type WebSearchProviderOptions, appendAuditEntry, branchNamespaceName, buildProcedureMarkdownBody, buildProcedureRecallSection, checkMarketplaceManifest, clearBulkImportSources, clearTrainingExportAdapters, coerceInstallExtension, convertMemoriesToRecords, createBackend, createSpace, curate, defaultEnrichmentPipelineConfig, defaultWriteMemoriesToOrchestrator, deleteSpace, describeCodingScope, doctorConnector, emptyManifest, expandTildePath, findContradictions, findDuplicates, generateContextTree, generateMarketplaceManifest, generateResolverDocument, getActiveSpace, getAuditLog, getBulkImportSource, getManifestPath, getSpacesDir, getTaxonomyDir, getTaxonomyFilePath, getTrainingExportAdapter, hostIdForConnector, importedMemoryToTurn, installConnector, installFromMarketplace, isReviewPrompt, listBulkImportSources, listConnectors, listReviewItems, listSpaces, listTrainingExportAdapters, loadManifest, loadRegistry, loadTaxonomy, manifestDir, manifestPath, matchesPatterns, mergeSpaces, migrateFromEngram, normalizeOriginUrl, onboard, packReviewContext, parseProcedureStepsFromBody, parseTouchedFiles, performReview, projectNamespaceName, promoteSpace, publisherFor, publisherForConnector, pullFromSpace, pushToSpace, rankReviewCandidates, readAuditLog, readManifest, registerBulkImportSource, registerPublisher, registerTrainingExportAdapter, removeConnector, renderExtensionsBlock, renderExtensionsFooter, resolveCategory, resolveCodingNamespaceOverlay, resolveGitContext, resolvePrincipal, rollbackFromEngramMigration, runBinaryLifecyclePipeline, runCodexMaterialize, runEnrichmentPipeline, runImporter, runPostConsolidationMaterialize, saveManifest, saveRegistry, saveTaxonomy, scanForBinaries, shareSpace, stableHash, switchSpace, syncChanges, validateImportBatchSize, validateImportRateLimit, validateMarketplaceManifest, validateSlug, validateTaxonomy, watchForChanges, writeManifest, writeMarketplaceManifest };
+/**
+ * Peer registry storage primitives — issue #679 PR 1/5.
+ *
+ * Pure file-I/O helpers for the per-peer kernel files:
+ *
+ *   peers/{peer-id}/identity.md       — slow, human-edited identity facts
+ *   peers/{peer-id}/profile.md        — evolving profile (reasoner-owned)
+ *   peers/{peer-id}/interactions.log.md — append-only signal log
+ *
+ * No reasoner logic, no recall integration, no migration of existing
+ * identity-anchor data — those land in PR 2/5 — 5/5.
+ *
+ * Path safety: `peerId` is validated against PEER_ID_PATTERN before any
+ * filesystem operation. Reading a non-existent peer returns null (does not
+ * throw). Reading malformed files throws — callers can catch and recover.
+ */
+
+/**
+ * Validate a peer id. Throws `Error` with a descriptive message on failure.
+ * Exported so callers can pre-check user input before constructing a Peer.
+ */
+declare function assertValidPeerId(peerId: unknown): asserts peerId is string;
+/** Root directory holding the peer registry, relative to memoryDir. */
+declare const PEERS_DIR_NAME = "peers";
+/**
+ * Read a peer's identity kernel.
+ *
+ * Returns `null` (does not throw) when the peer directory or identity
+ * file does not exist. Throws on filesystem errors other than ENOENT and
+ * on malformed files.
+ */
+declare function readPeer(memoryDir: string, peerId: string): Promise<Peer | null>;
+/**
+ * Write (create or overwrite) a peer's identity kernel.
+ *
+ * Creates `peers/{id}/` if it does not exist. Does not touch the peer's
+ * profile or interaction log. Atomic-write semantics are deferred to
+ * later PRs — for the schema slice we simply write the file.
+ */
+declare function writePeer(memoryDir: string, peer: Peer): Promise<void>;
+/**
+ * Enumerate all peers under `memoryDir/peers/`.
+ *
+ * Returns an empty array if the peers root does not exist. Subdirectories
+ * whose name fails `PEER_ID_PATTERN` are skipped (defensive: the user
+ * may have hand-edited the directory). Directories that exist but lack
+ * `identity.md` are also skipped.
+ */
+declare function listPeers(memoryDir: string): Promise<Peer[]>;
+/**
+ * Append one entry to a peer's interaction log.
+ *
+ * Creates `peers/{id}/` and `interactions.log.md` if needed. The file is
+ * append-only by contract — this helper never rewrites prior entries.
+ * Returns the absolute path of the log file (useful for tests).
+ */
+declare function appendInteractionLog(memoryDir: string, peerId: string, entry: PeerInteractionLogEntry): Promise<string>;
+/**
+ * Read a peer's profile. Returns null if the profile file does not exist.
+ *
+ * The PR-1 surface only ships the structured read/write so the reasoner
+ * (PR 2/5) and recall integration (PR 3/5) have a stable target. We do
+ * not yet expose any field-update helpers.
+ */
+declare function readPeerProfile(memoryDir: string, peerId: string): Promise<PeerProfile | null>;
+/**
+ * Write (create or overwrite) a peer's profile.
+ */
+declare function writePeerProfile(memoryDir: string, profile: PeerProfile): Promise<void>;
+/**
+ * Read the raw interaction log for a peer.
+ *
+ * Returns the empty string if the log does not yet exist. Callers parse
+ * the log themselves — this PR does not ship structured log parsing.
+ * Exposed primarily so tests can verify monotonic append semantics.
+ */
+declare function readInteractionLogRaw(memoryDir: string, peerId: string): Promise<string>;
+
+/**
+ * Capsule fork semantics — issue #676 PR 4/6.
+ *
+ * A fork takes an existing capsule archive, imports it into a target memory
+ * root under the `fork` conflict-resolution mode (which rebases all records
+ * under `forks/<capsule-id>/`), and then writes a lineage breadcrumb at
+ * `<targetRoot>/forks/<forkId>/lineage.json` recording the parent capsule's
+ * identity.  Subsequent forks of the same parent or of a fork produce a
+ * queryable chain.
+ *
+ * The lineage breadcrumb is a pure JSON file — no gzip, no bundle format —
+ * so downstream tooling can read it with a single `readFile` + `JSON.parse`
+ * without pulling in the transfer pipeline.
+ */
+
+/**
+ * Options accepted by {@link forkCapsule}.
+ *
+ * `sourceArchive` — absolute or cwd-relative path to a `.capsule.json.gz`
+ * archive produced by `exportCapsule`.
+ *
+ * `targetRoot` — absolute or cwd-relative path to the memory directory that
+ * will receive the forked records. Must be an existing directory.
+ *
+ * `forkId` — user-chosen id for the fork.  Validated against
+ * {@link CAPSULE_ID_PATTERN}; must be unique under `<targetRoot>/forks/` (a
+ * pre-existing `forks/<forkId>/` directory is rejected before any write).
+ *
+ * `versioning` — optional page-versioning config forwarded to
+ * {@link importCapsule}. Only relevant when the target root already has files
+ * that would be overwritten (fork mode is skip-on-exist by design, so this is
+ * a no-op unless mode is changed in a future subclass).
+ *
+ * `now` — optional clock override (ms epoch) forwarded to `importCapsule` for
+ * deterministic fork-id rewriting in tests.
+ */
+interface ForkCapsuleOptions {
+    sourceArchive: string;
+    targetRoot: string;
+    forkId: string;
+    now?: number;
+}
+/**
+ * The lineage breadcrumb written to `forks/<forkId>/lineage.json`.
+ *
+ * Fields are intentionally flat so the file is human-readable at a glance
+ * and trivially diffable by `git diff`.
+ *
+ * `forkId`          — the id supplied to `forkCapsule`.
+ * `forkedAt`        — ISO-8601 creation timestamp (UTC).
+ * `parent`          — structured linkage to the source capsule.
+ * `importedRecords` — number of records written by the fork import.
+ * `skippedRecords`  — number of records skipped (target already existed).
+ */
+interface ForkLineage {
+    forkId: string;
+    forkedAt: string;
+    parent: CapsuleParent;
+    importedRecords: number;
+    skippedRecords: number;
+}
+interface ForkCapsuleResult {
+    /** Absolute path to the source archive (unchanged, for chaining). */
+    archivePath: string;
+    /** The V2 manifest decoded from the source archive. */
+    manifest: ExportManifestV2;
+    /** Result of the underlying `importCapsule` call. */
+    importResult: ImportCapsuleResult;
+    /** The lineage breadcrumb that was written. */
+    lineage: ForkLineage;
+    /** Absolute path to the lineage breadcrumb file. */
+    lineagePath: string;
+}
+/**
+ * Fork a capsule archive into a target memory root.
+ *
+ * Sequence:
+ *   1. Validate `forkId` against {@link CAPSULE_ID_PATTERN}.
+ *   2. Resolve `targetRoot` and verify it is an existing directory (not a
+ *      symlink — mirrors {@link importCapsule}'s root validation).
+ *   3. Reject if `forks/<forkId>/` already exists in the target root
+ *      (gotcha #49: deduplicate batch inputs; gotcha #25: don't destroy
+ *      old state).
+ *   4. Import the archive in `"fork"` mode via {@link importCapsule}.
+ *   5. Write the lineage breadcrumb at `forks/<forkId>/lineage.json`.
+ *      The breadcrumb dir is created by step 4 (importCapsule writes records
+ *      under `forks/<sourceId>/`); if `forkId !== sourceId` we may need to
+ *      create the fork dir ourselves. We always `mkdir -p` defensively.
+ *
+ * Error semantics:
+ *   - All validation errors throw before any filesystem write (fail-closed,
+ *     gotcha #25).
+ *   - If `importCapsule` throws after writing some records, the lineage
+ *     breadcrumb is NOT written (partial state is better than a false
+ *     "fork complete" marker — gotcha #12: write rollback data before
+ *     success markers).
+ */
+declare function forkCapsule(opts: ForkCapsuleOptions): Promise<ForkCapsuleResult>;
+/**
+ * Read the lineage breadcrumb for a given fork in a memory root.
+ *
+ * Returns `null` when no breadcrumb exists (the directory is not a fork, or
+ * was created before PR 4/6). Never throws for a missing file — callers
+ * that need to distinguish "not a fork" from "corrupt breadcrumb" should
+ * handle the JSON parse error themselves.
+ *
+ * `forkId` is validated against {@link CAPSULE_ID_PATTERN} before being
+ * joined into the breadcrumb path so a malicious value like
+ * `../../../../tmp` cannot escape the `forks/` namespace and resolve to
+ * unrelated files outside the configured memory root (Codex P2 #751).
+ * Invalid ids return `null` (same shape as "no breadcrumb"); callers that
+ * need to distinguish "invalid id" from "absent breadcrumb" should validate
+ * upstream.
+ */
+declare function readForkLineage(targetRoot: string, forkId: string): Promise<ForkLineage | null>;
+
+export { type AuditEntry, type BinaryAssetRecord, type BinaryAssetStatus, type BinaryLifecycleConfig, type BinaryLifecycleManifest, type BinaryStorageBackend, type BinaryStorageBackendConfig, BulkImportSourceAdapter, ClaudeCodeMemoryExtensionPublisher, CodexMemoryExtensionPublisher, type CodingNamespaceOverlay, type CodingScopeDescription, type ConflictEntry, type ConnectorCapability, type ConnectorInstance, type ConnectorManifest, type ConnectorRegistry, type ContradictionOptions, type ContradictionPair, type ContradictionResult$1 as CurateContradictionResult, type DuplicateResult as CurateDuplicateResult, type CurateOptions, type CurateResult, type CuratedStatement, DEFAULT_GRACE_PERIOD_DAYS, DEFAULT_IMPORT_BATCH_SIZE, DEFAULT_MAX_BINARY_SIZE_BYTES, DEFAULT_SCAN_PATTERNS, DEFAULT_TAXONOMY, type DedupOptions, type DedupResult, DiscoveredExtension, type DocFile, type DoctorCheck, type DoctorResult, type DriveChange, type DriveChangesPage, type DriveFileMetadata, type DuplicatePair, type EnrichmentAuditEntry, type EnrichmentCandidate, type EnrichmentCostTier, type EnrichmentPipelineConfig, type EnrichmentProvider, type EnrichmentProviderConfig, EnrichmentProviderRegistry, type EnrichmentResult, type EntityEnrichmentInput, type FileChange, FilesystemBackend, type ForkCapsuleOptions, type ForkCapsuleResult, type ForkLineage, GOOGLE_DRIVE_CONNECTOR_ID, GOOGLE_DRIVE_CURSOR_KIND, DEFAULT_POLL_INTERVAL_MS as GOOGLE_DRIVE_DEFAULT_POLL_INTERVAL_MS, type GenerateOptions, type GenerateResult, type GitContext, type GitInvoker, type GoogleDriveClient, type GoogleDriveClientFactory, type GoogleDriveConnectorConfig, type GoogleDriveSyncResult, HermesMemoryExtensionPublisher, type ImportProgress, ImportTurn, type ImportedMemory, type ImporterAdapter, type ImporterParseOptions, type ImporterTransformOptions, type ImporterWriteResult, type ImporterWriteTarget, type IngestionPlan, type InstallOptions, type InstallResult, LanceDbBackend, type LanguageInfo, LiveConnector, LiveConnectorRegistry, LiveConnectorRegistryError, MARKETPLACE_MANIFEST_FILENAME, MARKETPLACE_SCHEMA_VERSION, type MarketplaceConfig, type MarketplaceEntry, type MarketplaceInstallResult, type MarketplaceInstallType, type MarketplaceLogger, type MarketplaceManifest, type MarketplaceValidation, MaterializeResult, MeilisearchBackend, MemoryCategory, type MemoryEntry, type MemoryExtensionPublisher, MemoryFile, type MergeResult, type MigrationOptions, type MigrationResult, NOTION_CONNECTOR_ID, NOTION_CURSOR_KIND, NOTION_DEFAULT_POLL_INTERVAL_MS, NoneBackend, type NotionConnectorConfig, type OnboardOptions, type OnboardResult, OramaBackend, PEERS_DIR_NAME, PUBLISHERS, Peer, PeerInteractionLogEntry, PeerProfile, type PipelineResult, PluginConfig, type PostConsolidationMaterializeOptions, type ProjectShape, type ProvenanceEntry, type PublishContext, type PublishResult, type PublisherCapabilities, REMNIC_CITATION_FORMAT, REMNIC_MCP_TOOL_INVENTORY, REMNIC_RECALL_DECISION_RULES, REMNIC_SEMANTIC_OVERVIEW, type RemoveResult, ResolverDecision, type ReviewAction, type ReviewCandidate, type ReviewContext, type ReviewItem, type ReviewListResult, type ReviewOptions, type ReviewResult, type RollbackResult, RolloutSummaryInput, type RunImportOptions, type RunImporterResult, type RunMaterializeOptions, type Space, type SpaceKind, type SpaceManifest, type SpacePromoteResult, type SpacePullResult, type SpacePushResult, type SpaceShareResult, type SpaceSwitchResult, type StatementProvenance, StorageManager, SyncIncrementalResult, type SyncOptions, type SyncResult, type SyncState, Taxonomy, type TrainingExportAdapter, type TrainingExportOptions, type TrainingExportRecord, type TreeNode, type WebSearchFn, WebSearchProvider, type WebSearchProviderOptions, appendAuditEntry, appendInteractionLog, assertValidPeerId, branchNamespaceName, buildProcedureMarkdownBody, buildProcedureRecallSection, checkMarketplaceManifest, clearBulkImportSources, clearTrainingExportAdapters, coerceInstallExtension, convertMemoriesToRecords, createBackend, createGoogleDriveConnector, createNotionConnector, createSpace, curate, defaultEnrichmentPipelineConfig, defaultGoogleDriveClientFactory, defaultWriteMemoriesToOrchestrator, deleteSpace, describeCodingScope, doctorConnector, emptyManifest, expandTildePath, findContradictions, findDuplicates, forkCapsule, generateContextTree, generateMarketplaceManifest, generateResolverDocument, getActiveSpace, getAuditLog, getBulkImportSource, getManifestPath, getSpacesDir, getTaxonomyDir, getTaxonomyFilePath, getTrainingExportAdapter, hostIdForConnector, importedMemoryToTurn, installConnector, installFromMarketplace, isReviewPrompt, listBulkImportSources, listConnectors, listPeers, listReviewItems, listSpaces, listTrainingExportAdapters, loadManifest, loadRegistry, loadTaxonomy, manifestDir, manifestPath, matchesPatterns, mergeSpaces, migrateFromEngram, normalizeOriginUrl, onboard, packReviewContext, parseProcedureStepsFromBody, parseTouchedFiles, performReview, projectNamespaceName, promoteSpace, publisherFor, publisherForConnector, pullFromSpace, pushToSpace, rankReviewCandidates, readAuditLog, readForkLineage, readInteractionLogRaw, readManifest, readPeer, readPeerProfile, registerBulkImportSource, registerPublisher, registerTrainingExportAdapter, removeConnector, renderExtensionsBlock, renderExtensionsFooter, resolveCategory, resolveCodingNamespaceOverlay, resolveGitContext, resolvePrincipal, rollbackFromEngramMigration, runBinaryLifecyclePipeline, runCodexMaterialize, runEnrichmentPipeline, runImporter, runPostConsolidationMaterialize, saveManifest, saveRegistry, saveTaxonomy, scanForBinaries, shareSpace, stableHash, switchSpace, syncChanges, validateGoogleDriveConfig, validateImportBatchSize, validateImportRateLimit, validateMarketplaceManifest, validateNotionConfig, validateSlug, validateTaxonomy, watchForChanges, writeManifest, writeMarketplaceManifest, writePeer, writePeerProfile };