@remnic/core 9.3.719 → 9.3.721

package/dist/index.d.ts

@@ -1,8 +1,8 @@
 export { PluginEntryResolverOptions, resolvePluginEntry } from './plugin-entry-resolver.js';
 export { isOpenaiApiKeyDisabled, parseConfig, resolveEnvVars } from './config.js';
 export { MigrationOptions, MigrationResult, RollbackResult, migrateFromEngram, rollbackFromEngramMigration } from './migrate/from-engram.js';
-import { S as SpeakerRegistry, W as WearablesService } from './orchestrator-kOxredSr.js';
-export { D as DEFAULT_SELF_NAME, O as Orchestrator, R as ResolvedSpeaker, a as SpeakerOverride, b as WEARABLE_SOURCE_PREFIX, c as WearableDayTranscriptView, d as WearableMemoryGenDeps, e as WearableMemoryGenResult, f as WearableMemorySearchResult, g as WearableMemoryWriter, h as WearableSearchBackend, i as WearableStorageIo, j as WearableSyncDeps, k as WearableSyncOptions, l as WearableTranscriptSearchResult, m as WearablesServiceDeps, n as buildExtractionTurns, o as dateInTimezone, p as defaultTimezone, q as defaultWorkspaceDir, r as distinctSpeakerLabels, s as emptySpeakerRegistry, t as generateWearableMemories, u as importNativeMemories, v as loadSpeakerRegistry, w as locateTranscriptPath, x as memoryStatusForMode, y as resolveSpeaker, z as resolveSyncDates, A as sanitizeSessionKeyForFilename, B as saveSpeakerRegistry, C as speakerRegistryKey, E as speakersFilePath, F as syncWearableSource, H as wearableDayTag, J as wearableSourceLabel, K as writeDailyDigestMemory } from './orchestrator-kOxredSr.js';
+import { S as SpeakerRegistry, W as WearablesService } from './orchestrator-f5xv19kp.js';
+export { D as DEFAULT_SELF_NAME, O as Orchestrator, R as ResolvedSpeaker, a as SpeakerOverride, b as WEARABLE_SOURCE_PREFIX, c as WearableDayTranscriptView, d as WearableMemoryGenDeps, e as WearableMemoryGenResult, f as WearableMemorySearchResult, g as WearableMemoryWriter, h as WearableSearchBackend, i as WearableStorageIo, j as WearableSyncDeps, k as WearableSyncOptions, l as WearableTranscriptSearchResult, m as WearablesServiceDeps, n as buildExtractionTurns, o as dateInTimezone, p as defaultTimezone, q as defaultWorkspaceDir, r as distinctSpeakerLabels, s as emptySpeakerRegistry, t as generateWearableMemories, u as importNativeMemories, v as loadSpeakerRegistry, w as locateTranscriptPath, x as memoryStatusForMode, y as resolveSpeaker, z as resolveSyncDates, A as sanitizeSessionKeyForFilename, B as saveSpeakerRegistry, C as speakerRegistryKey, E as speakersFilePath, F as syncWearableSource, H as wearableDayTag, J as wearableSourceLabel, K as writeDailyDigestMemory } from './orchestrator-f5xv19kp.js';
 export { normalizeProjectionPreview, normalizeProjectionTags } from './memory-projection-format.js';
 export { ModelCapabilities, ModelRegistry } from './model-registry.js';
 export { ACTIVE_STATUSES, ContradictionFilter, ContradictionJudgeBatchResult, ContradictionJudgeInput, ContradictionJudgeResult, ContradictionListResult, ContradictionVerdict, ResolutionResult, ResolutionVerb, ScanDependencies, ScanResult, computePairId, executeResolution, isCoolingDown, isValidResolutionVerb, judgeContradictionPairs, listPairs, readPair, resolvePair, runContradictionScan, writePair, writePairs } from './contradiction/index.js';
@@ -20,11 +20,11 @@ export { CodexCliFallbackConfig, CodexCliFallbackMessage, CodexCliFallbackOption
 export { BufferSurpriseProbe, SmartBuffer, TriggerDecision } from './buffer.js';
 export { ComputeSurpriseOptions, DEFAULT_SURPRISE_K, RecentMemoryLike, computeSurprise } from './buffer-surprise.js';
 export { BufferSurpriseDistribution, BufferSurpriseReader, BufferSurpriseReportOptions, reportBufferSurpriseDistribution } from './buffer-surprise-report.js';
-import { aG as CodingContext, aR as CodingModeConfig, P as PluginConfig, M as MemoryCategory, aS as WearableCleanupSettings, ax as WearableSourceSettings, aB as WearablesConfig, aA as WearableSourceConnector, aw as WearableConversation, aF as WearableCorrectionRule, aT as WearableDayTranscriptMeta, aE as WearableDayTranscript } from './types-ACmDOScJ.js';
-export { J as AgentAccessAuthToken, r as BriefingActiveThread, aU as BriefingConfig, p as BriefingFocus, o as BriefingFollowup, aV as BriefingOpenCommitment, t as BriefingRecentEntity, s as BriefingResult, n as BriefingSections, aW as BriefingWindow, z as BufferSurpriseEvent, q as CalendarEvent, C as CalendarSource, aX as CodexCompatConfig, aJ as ConsolidationObservation, a6 as ContinuityImprovementLoop, aY as DEFAULT_RECALL_DISCLOSURE, E as EntityFile, $ as EntityStructuredSection, aZ as ExtractedFact, G as GatewayConfig, ac as MemoryActionEligibilityContext, a_ as MemoryActionEligibilitySource, U as MemoryActionType, g as MemoryFile, k as MemoryFrontmatter, a$ as MemoryObservation, b0 as MemoryScope, b1 as RECALL_DISCLOSURE_LEVELS, i as RecallDisclosure, D as SecretRef, b2 as WearableAuthCheck, b3 as WearableFetchOptions, b4 as WearableFetchPage, az as WearableMemoryMode, ay as WearableNativeMemory, b5 as WearableNativeMemoryPage, aD as WearableSourceStatus, aC as WearableSyncSummary, b6 as WearableTranscriptSegment, b7 as isRecallDisclosure } from './types-ACmDOScJ.js';
+import { aH as CodingContext, aS as CodingModeConfig, P as PluginConfig, M as MemoryCategory, aT as WearableCleanupSettings, ay as WearableSourceSettings, aC as WearablesConfig, aB as WearableSourceConnector, ax as WearableConversation, aG as WearableCorrectionRule, aU as WearableDayTranscriptMeta, aF as WearableDayTranscript } from './types-DwO1Ot4n.js';
+export { J as AgentAccessAuthToken, r as BriefingActiveThread, aV as BriefingConfig, p as BriefingFocus, o as BriefingFollowup, aW as BriefingOpenCommitment, t as BriefingRecentEntity, s as BriefingResult, n as BriefingSections, aX as BriefingWindow, z as BufferSurpriseEvent, q as CalendarEvent, C as CalendarSource, aY as CodexCompatConfig, aK as ConsolidationObservation, a6 as ContinuityImprovementLoop, aZ as DEFAULT_RECALL_DISCLOSURE, E as EntityFile, $ as EntityStructuredSection, a_ as ExtractedFact, G as GatewayConfig, ac as MemoryActionEligibilityContext, a$ as MemoryActionEligibilitySource, U as MemoryActionType, g as MemoryFile, k as MemoryFrontmatter, b0 as MemoryObservation, b1 as MemoryScope, b2 as RECALL_DISCLOSURE_LEVELS, i as RecallDisclosure, D as SecretRef, b3 as WearableAuthCheck, b4 as WearableFetchOptions, b5 as WearableFetchPage, aA as WearableMemoryMode, az as WearableNativeMemory, b6 as WearableNativeMemoryPage, aE as WearableSourceStatus, aD as WearableSyncSummary, b7 as WearableTranscriptSegment, b8 as isRecallDisclosure } from './types-DwO1Ot4n.js';
 export { JudgeBatchResult, JudgeCandidate, JudgeVerdict, JudgeVerdictKind, clearVerdictCache, createVerdictCache, getVerdictKind, isDurableVerdict, isValidCachedVerdict, judgeFactDurability, normalizeCachedVerdict, verdictCacheSize } from './extraction-judge.js';
 export { hasBroadGraphIntent, inferIntentFromText, intentCompatibilityScore, isTaskInitiationIntent, planRecallMode } from './intent.js';
-export { i as EngramAccessInputError, g as EngramAccessService, P as ProcedureStatsConfigSnapshot, j as ProcedureStatsRecent, k as ProcedureStatsReport, l as ProcedureStatusCounts, m as computeProcedureStats, n as formatProcedureStatsText } from './access-service-CZbnt0t2.js';
+export { i as EngramAccessInputError, g as EngramAccessService, P as ProcedureStatsConfigSnapshot, j as ProcedureStatsRecent, k as ProcedureStatsReport, l as ProcedureStatusCounts, m as computeProcedureStats, n as formatProcedureStatsText } from './access-service-Dj3I-VBS.js';
 export { FILTER_LABELS as DIRECT_ANSWER_FILTER_LABELS, DirectAnswerCandidate, DirectAnswerConfig, DirectAnswerInput, DirectAnswerReason, DirectAnswerResult, isDirectAnswerEligible } from './direct-answer.js';
 export { MemoryTier, TierRoutingPolicy, TierTransitionDecision, computeTierValueScore, decideTierTransition } from './tier-routing.js';
 export { ApplyReasoningTraceBoostOptions, BoostableResult, DEFAULT_REASONING_TRACE_BOOST, applyReasoningTraceBoost, isReasoningTracePath, looksLikeProblemSolvingQuery } from './reasoning-trace-recall.js';
@@ -38,7 +38,7 @@ export { OramaBackend } from './search/orama-backend.js';
 export { MeilisearchBackend } from './search/meilisearch-backend.js';
 export { buildEntityRecallSection } from './entity-retrieval.js';
 export { resolvePrincipal } from './namespaces/principal.js';
-export { N as NamespaceCatalog, c as NamespaceCatalogFilter, d as NamespaceCatalogRebuildResult, e as NamespaceCatalogSkippedRoot, f as NamespaceDiscoverySource, a as NamespaceKind, b as NamespaceRecord, g as NamespaceTouchMetadata } from './catalog-CEYlMs9X.js';
+export { N as NamespaceCatalog, c as NamespaceCatalogFilter, d as NamespaceCatalogRebuildResult, e as NamespaceCatalogSkippedRoot, f as NamespaceDiscoverySource, a as NamespaceKind, b as NamespaceRecord, g as NamespaceTouchMetadata } from './catalog-F-OEVbRQ.js';
 export { SESSION_CHANNEL_TYPE, SessionIdentity, SessionStoragePaths, legacyParserReadbackDir, parseSessionIdentity, sessionStoragePaths } from './session-identity.js';
 export { storagePathHash } from './storage-paths.js';
 export { TrustZoneName, TrustZoneRecord, TrustZoneRecordKind, TrustZoneSourceClass, isTrustZoneName } from './trust-zones.js';
@@ -62,8 +62,8 @@ export { CitationBlock, CitationEntry, CitationMetadata, buildCitationGuidance,
 export { initLogger, log } from './logger.js';
 export { b as SemanticDedupDecision, S as SemanticDedupHit, a as SemanticDedupLookup, c as SemanticDedupOptions, d as decideSemanticDedup } from './semantic-SLAa_prH.js';
 export { OFFLINE_SYNC_APPLY_MAX_BODY_BYTES, OFFLINE_SYNC_CHANGESET_FORMAT, OFFLINE_SYNC_FILE_CONTENT_MAX_CHUNK_BYTES, OFFLINE_SYNC_FILE_CONTENT_TRANSFER_CHUNK_BYTES, OFFLINE_SYNC_SNAPSHOT_BASE_MAX_BODY_BYTES, OFFLINE_SYNC_SNAPSHOT_FORMAT, OFFLINE_SYNC_STATE_VERSION, OfflineSyncApplyChangesetResult, OfflineSyncApplyFileContentChunkResult, OfflineSyncApplySnapshotResult, OfflineSyncChange, OfflineSyncChangeset, OfflineSyncConflict, OfflineSyncFileContentChunk, OfflineSyncFileDigest, OfflineSyncFileRecord, OfflineSyncFileState, OfflineSyncFileTarget, OfflineSyncFileWriteTarget, OfflineSyncSnapshot, OfflineSyncState, applyOfflineSyncChangeset, applyOfflineSyncFileContentChunk, applyOfflineSyncSnapshot, buildOfflineSyncChangeset, buildOfflineSyncChangesetFromSnapshot, buildOfflineSyncSnapshot, buildOfflineSyncSnapshotForPaths, buildOfflineSyncSnapshotFromBase, defaultOfflineSyncStatePath, fileStatesFromSnapshot, iterateOfflineSyncSnapshotFileRecords, normalizeOfflineSyncChangeset, normalizeOfflineSyncSnapshot, offlineSyncStateFromSnapshot, readOfflineSyncFileContentChunk, readOfflineSyncState, shouldPreferIncomingOfflineRuntimeFile, summarizeOfflineSyncChangeset, summarizeOfflineSyncPendingChanges, summarizeOfflineSyncPendingFiles, writeOfflineSyncState } from './offline-sync.js';
-import { D as DiscoveredExtension } from './semantic-consolidation-B58v3S-a.js';
-export { E as ExtensionSchema, R as REMNIC_EXTENSIONS_TOTAL_TOKEN_LIMIT, b as buildExtensionsBlockForConsolidation, d as discoverMemoryExtensions, r as resolveExtensionsRoot } from './semantic-consolidation-B58v3S-a.js';
+import { D as DiscoveredExtension } from './semantic-consolidation-BQm1e1Pn.js';
+export { E as ExtensionSchema, R as REMNIC_EXTENSIONS_TOTAL_TOKEN_LIMIT, b as buildExtensionsBlockForConsolidation, d as discoverMemoryExtensions, r as resolveExtensionsRoot } from './semantic-consolidation-BQm1e1Pn.js';
 export { ConnectorCapability, ConnectorInstance, ConnectorManifest, ConnectorRegistry, DoctorCheck, DoctorResult, InstallOptions, InstallResult, MARKETPLACE_MANIFEST_FILENAME, MARKETPLACE_SCHEMA_VERSION, MarketplaceConfig, MarketplaceEntry, MarketplaceInstallResult, MarketplaceInstallType, MarketplaceLogger, MarketplaceManifest, MarketplaceValidation, RemoveResult, checkMarketplaceManifest, coerceInstallExtension, doctorConnector, generateMarketplaceManifest, getConnectorToken, installConnector, installFromMarketplace, listConnectors, loadRegistry, removeConnector, saveRegistry, validateMarketplaceManifest, writeMarketplaceManifest } from './connectors/index.js';
 import { L as LiveConnector, S as SyncIncrementalResult } from './framework-CNDn2164.js';
 export { c as CONNECTOR_ID_PATTERN, C as ConnectorConfig, b as ConnectorCursor, a as ConnectorDocument, d as ConnectorDocumentSource, e as SyncIncrementalArgs, i as isValidConnectorId, p as persistableConnectorConfig, r as redactConnectorConfigSecrets } from './framework-CNDn2164.js';
@@ -79,7 +79,7 @@ export { EnrichmentAuditEntry, EnrichmentCandidate, EnrichmentCostTier, Enrichme
 export { d as BulkImportError, B as BulkImportOptions, b as BulkImportResult, a as BulkImportSource, e as BulkImportSourceAdapter, f as ImportSourceRole, I as ImportTurn, g as ImportTurnValidationIssue, i as isImportRole, p as parseIsoTimestamp, v as validateImportTurn } from './types-gb_SNtjR.js';
 export { clearBulkImportSources, getBulkImportSource, listBulkImportSources, registerBulkImportSource } from './bulk-import/index.js';
 export { a as ProcessBatchContext, P as ProcessBatchFn, b as ProcessBatchResult, f as formatBatchTranscript, r as resolveBulkImportContext, c as runBulkImportPipeline, v as validateBatchSize } from './pipeline-DmqtvION.js';
-export { B as BulkImportCliCommandOptions, p as parseStrictCliDate, r as runBulkImportCliCommand } from './cli-1orcdXOY.js';
+export { B as BulkImportCliCommandOptions, p as parseStrictCliDate, r as runBulkImportCliCommand } from './cli-P_GaYcCY.js';
 export { DEFAULT_IMPORT_BATCH_SIZE, ImportProgress, ImportedMemory, ImporterAdapter, ImporterParseOptions, ImporterTransformOptions, ImporterWriteResult, ImporterWriteTarget, RunImportOptions, RunImporterResult, defaultWriteMemoriesToOrchestrator, importedMemoryToTurn, runImporter, validateImportBatchSize, validateImportRateLimit } from './importers/index.js';
 export { FallbackLlmClient, FallbackLlmOptions, FallbackLlmResponse, FallbackLlmRuntimeContext } from './fallback-llm.js';
 export { ComputeMemoryWorthInput, MemoryWorthResult, computeMemoryWorth } from './memory-worth.js';
@@ -105,16 +105,26 @@ import './session-integrity.js';
 import './summarizer.js';
 import './orchestration/maintenance.js';
 import './namespaces/search.js';
+import './recall-state.js';
+import './compounding/engine.js';
+import './shared-context/manager.js';
+import 'zod';
+import './consolidation-operator.js';
+import './memory-projection-store.js';
+import './maintenance/memory-governance.js';
+import './runtime/better-sqlite.js';
+import 'better-sqlite3';
+import './structured-attributes.js';
+import './utility-runtime.js';
+import './lifecycle.js';
 import './relevance.js';
 import './negative.js';
-import './recall-state.js';
 import './session-observer-state.js';
 import './embedding-fallback.js';
 import './capabilities.js';
 import './replay/types.js';
 import './lcm/engine.js';
 import './lcm/archive.js';
-import 'better-sqlite3';
 import './lcm/summarizer.js';
 import './lcm/dag.js';
 import './lcm/queue.js';
@@ -122,14 +132,6 @@ import './conversation-index/backend.js';
 import './conversation-index/chunker.js';
 import './faiss-adapter-BHecI1fF.js';
 import './runtime/child-process.js';
-import './shared-context/manager.js';
-import 'zod';
-import './compounding/engine.js';
-import './consolidation-operator.js';
-import './memory-projection-store.js';
-import './maintenance/memory-governance.js';
-import './runtime/better-sqlite.js';
-import './structured-attributes.js';
 import './policy-runtime.js';
 import './profiling.js';
 import './schemas.js';
@@ -139,7 +141,6 @@ import './graph-snapshot.js';
 import './graph.js';
 import './transfer/capsule-export.js';
 import './capsule-cli.js';
-import './lifecycle.js';
 import './search/embed-helper.js';
 import 'node:http';
 import './adapters/types.js';
@@ -287,608 +288,248 @@ interface CodingScopeDescription {
 declare function describeCodingScope(codingContext: CodingContext | null | undefined, config: Pick<CodingModeConfig, "projectScope" | "branchScope" | "globalFallback">, defaultNamespace?: string): CodingScopeDescription;
 
 /**
- * @remnic/core — Live Connectors Registry (issue #683 PR 1/N)
- *
- * Pure in-memory registry. No I/O. Concrete connectors register themselves at
- * orchestrator boot (later PRs); the maintenance scheduler asks the registry
- * for the active set when running due syncs.
+ * Strict UTC-only parser — accepts `YYYY-MM-DDTHH:MM:SS[.sss]Z`.
+ * Returns milliseconds since epoch, or `null` if invalid.
+ */
+declare function parseIsoUtcTimestamp(value: string): number | null;
+/**
+ * Lenient parser — accepts variable-precision fractional seconds and either
+ * a `Z` suffix or a `[+-]HH:MM` offset. Returns milliseconds since epoch, or
+ * `null` if the string is not a well-formed RFC 3339 timestamp.
+ */
+declare function parseIsoOffsetTimestamp(value: string): number | null;
+/**
+ * Benchmark/adapter parser — accepts ISO date-only values plus reduced
+ * precision date-times used by public benchmark fixtures. Returns milliseconds
+ * since epoch, or `null` if invalid.
  */
+declare function parseFlexibleIsoTimestamp(value: string): number | null;
 
 /**
- * Thrown when registering a duplicate id or an id that fails validation.
- *
- * Distinct error class so callers can distinguish framework-level mistakes
- * (which are programmer errors) from connector-runtime failures.
+ * Intent-gated recall for active procedure memories (issue #519).
  */
-declare class LiveConnectorRegistryError extends Error {
-    constructor(message: string);
+
+/**
+ * Build markdown for the recall pipeline when procedural memory is enabled and
+ * the prompt looks like task initiation.
+ */
+declare function buildProcedureRecallSection(storage: StorageManager, prompt: string, config: PluginConfig): Promise<string | null>;
+
+/**
+ * Procedural memory types (issue #519).
+ * Bodies use ordered "## Step N" sections; machine fields live in frontmatter / structuredAttributes.
+ */
+interface ProcedureStep {
+    order: number;
+    intent: string;
+    toolCall?: {
+        kind: string;
+        signature: string;
+    };
+    expectedOutcome?: string;
+    optional?: boolean;
 }
+/** Serialize steps into markdown body (human-editable). */
+declare function buildProcedureMarkdownBody(steps: ProcedureStep[]): string;
 /**
- * In-memory registry of live connectors. One instance per orchestrator. Not
- * safe for cross-process sharing — wire each process to its own registry.
+ * Best-effort parse of "## Step N" blocks into ProcedureStep records.
+ * Returns null when no step headers are found.
  */
-declare class LiveConnectorRegistry {
-    private readonly connectors;
+declare function parseProcedureStepsFromBody(content: string): ProcedureStep[] | null;
+
+interface GitContext {
     /**
-     * Register a connector. Throws `LiveConnectorRegistryError` if the id is
-     * malformed or already registered.
+     * Stable identifier for the project. Derived from `git remote get-url origin`
+     * when an origin remote is configured, otherwise from the repo root path.
      *
-     * Re-registration is rejected (rather than silently overwriting) because
-     * silent overwrites mask plugin loading bugs in development and could let
-     * a malicious extension shadow a built-in connector.
+     * Formatted as `origin:<hex>` or `root:<hex>` so that the source is visible
+     * to operators (see `remnic doctor`, issue #569 acceptance criteria).
      */
-    register(connector: LiveConnector): void;
+    projectId: string;
     /**
-     * Look up a connector by id. Returns `undefined` if not registered.
+     * Current branch, e.g. `main`, `feat/foo`. `null` only in detached-HEAD
+     * state (e.g. rebase in progress). Callers should treat `null` as "no
+     * branch-scope overlay applies" without erroring.
      */
-    get(id: string): LiveConnector | undefined;
+    branch: string | null;
     /**
-     * Return all registered connectors, sorted by id for stable enumeration.
+     * Absolute path to the repository root (the directory containing `.git`).
+     * Tilde-expanded per CLAUDE.md #17.
      */
-    list(): LiveConnector[];
+    rootPath: string;
     /**
-     * Remove a connector. Returns `true` if a connector was removed, `false`
-     * otherwise. The cursor / state file on disk is **not** touched — callers
-     * who want to fully decommission a connector must also delete its state
-     * file via the `state-store` module.
+     * Best-effort default branch (usually `main` or `master`). Derived from the
+     * `refs/remotes/origin/HEAD` symbolic ref. `null` when not available (e.g.
+     * fresh clone without a default branch symref, or no origin remote).
      */
-    unregister(id: string): boolean;
+    defaultBranch: string | null;
+}
+/**
+ * Injectable git-invocation surface. Only the commands `resolveGitContext`
+ * actually needs are exposed. Tests inject a mock implementation to avoid
+ * spawning a real git process.
+ */
+interface GitInvoker {
     /**
-     * Number of registered connectors. Cheap; safe to call frequently.
+     * Run `git <args>` with `cwd` as the working directory. Must return
+     * `{ stdout, exitCode }` with `stdout` trimmed by the caller as needed.
+     * Implementations should NOT throw for non-zero exit codes — they should
+     * return the exit code so the resolver can decide how to recover.
      */
-    size(): number;
+    (cwd: string, args: string[]): {
+        stdout: string;
+        exitCode: number;
+    };
 }
-
 /**
- * @remnic/core — Google Drive live connector (issue #683 PR 2/N)
- *
- * Concrete `LiveConnector` implementation that incrementally imports text
- * content from a user's Google Drive into Remnic. Built on top of the
- * framework shipped in PR 1/N (`framework.ts` / `registry.ts` /
- * `state-store.ts`).
- *
- * Design notes:
- *
- *   - **Cursor semantics.** We page Drive with the official `changes` API
- *     when a `startPageToken` is available. The cursor is opaque from the
- *     framework's POV (`{kind: "drivePageToken", value: ...}`), and on the
- *     very first sync (cursor=null) we call `changes.getStartPageToken()`
- *     to seed it without importing anything. This matches the documented
- *     Drive incremental-sync recipe and means re-runs never re-ingest the
- *     same file as long as the cursor file survives.
- *
- *   - **Folder scope.** When `folderIds` is non-empty, files are filtered
- *     to those whose `parents` intersect the configured folder set. Drive
- *     does not currently support server-side parent filtering on the
- *     `changes.list` endpoint, so we pull the change record's `file` payload
- *     and apply the filter on our side. Folder ids are validated up front so
- *     a typo in config doesn't silently cause a broad import.
- *
- *   - **Content extraction.** Google-native MIME types
- *     (`application/vnd.google-apps.{document,spreadsheet,presentation}`)
- *     are exported via `files.export` to plaintext. Plain-text MIME types
- *     are pulled with `files.get?alt=media`. Everything else is skipped —
- *     bytes from binary formats (images, PDFs, archives) belong in the
- *     binary-lifecycle pipeline, not in the textual ingestion path.
- *
- *   - **Idempotency.** Each emitted `ConnectorDocument.source` carries
- *     `externalId = file.id` plus `externalRevision = file.modifiedTime`,
- *     so downstream dedup (CLAUDE.md gotcha #44 — never index content that
- *     failed to persist) can recognise repeat fetches even if the cursor is
- *     manually rewound.
- *
- *   - **Privacy.** No document content is ever logged. Folder ids and
- *     counts may be logged. OAuth credentials (`clientId`,
- *     `clientSecret`, `refreshToken`) are accepted via config but the
- *     intent is for callers to populate them from a secret store; we never
- *     persist credentials through the connector state-store. Per CLAUDE.md
- *     repository-privacy rules, no real credentials may appear in tests,
- *     fixtures, or comments.
- *
- *   - **À-la-carte packaging (CLAUDE.md gotcha #57).** `googleapis` is NOT
- *     listed as a hard dependency of `@remnic/core`. It is loaded via a
- *     computed-specifier dynamic import (`await import("google" + "apis")`)
- *     so bundlers cannot statically resolve it, and it is declared as an
- *     optional peer dependency. Operators who never enable the connector
- *     pay nothing for it.
+ * Non-cryptographic stable hash. Used only to derive a deterministic
+ * `projectId` from either the origin URL or the root path. The hash does not
+ * need to be collision-resistant against adversarial input — it is purely a
+ * namespace discriminator.
  *
- *   - **Read-only.** This connector only reads. It never marks files as
- *     read, edits metadata, or modifies sharing settings.
+ * Uses FNV-1a 32-bit so we don't pull in `node:crypto` for a simple bucket
+ * key. Output is lowercase hex, zero-padded to 8 characters.
  */
-
+declare function stableHash(input: string): string;
 /**
- * Stable connector id. Lives in the registry under this exact string.
+ * Normalize a git remote URL so that equivalent SSH / HTTPS forms of the
+ * same repo produce the same `projectId`. Handles:
+ *   - `git@github.com:foo/bar.git`  → `github.com/foo/bar`
+ *   - `https://github.com/foo/bar`  → `github.com/foo/bar`
+ *   - `https://github.com/foo/bar.git` → `github.com/foo/bar`
+ *   - `ssh://git@github.com/foo/bar` → `github.com/foo/bar`
+ *   - `ssh://git@github.com:2222/foo/bar` → `github.com/foo/bar` (port stripped)
+ *
+ * Case-insensitive (remote hostnames and most repo paths on major forges are
+ * case-insensitive in practice).
  */
-declare const GOOGLE_DRIVE_CONNECTOR_ID = "google-drive";
+declare function normalizeOriginUrl(rawUrl: string): string;
+interface ResolveGitContextOptions {
+    /** Inject a git invoker (tests). Defaults to spawning real `git`. */
+    invoker?: GitInvoker;
+}
 /**
- * Cursor `kind` we emit. Treated as opaque by the framework; documented
- * here so tests can assert on it.
+ * Detect the git project + branch for `cwd`.
+ *
+ * Returns `null` when:
+ *   - `cwd` is not an absolute path (invalid input, CLAUDE.md #51)
+ *   - `cwd` is not inside a git worktree
+ *   - `git` is not available on PATH
+ *
+ * Never throws.
  */
-declare const GOOGLE_DRIVE_CURSOR_KIND = "drivePageToken";
+declare function resolveGitContext(cwd: string, options?: ResolveGitContextOptions): Promise<GitContext | null>;
+
 /**
- * Default poll interval (5 minutes). Surfaced in `openclaw.plugin.json`
- * defaults and in the documented config schema. Drive's `changes.list`
- * endpoint is cheap, but polling sub-minute is wasteful for a personal
- * memory layer.
+ * Diff-aware review-context packer (issue #569 PR 4).
+ *
+ * When an agent is asked "review this PR" / "what changed in this diff" /
+ * "look at this diff", the prompt that reaches recall is short and generic
+ * — the real signal is the diff itself. This module:
+ *
+ *   1. Detects review-intent prompts via `isReviewPrompt`.
+ *   2. Extracts the touched file list from a unified diff via
+ *      `parseTouchedFiles`.
+ *   3. Re-ranks a set of candidate memories so that memories whose
+ *      `entityRefs` mention a touched path float to the top. The boost is
+ *      additive and bounded so it doesn't obliterate the original ranking —
+ *      it's a bias, not a filter.
+ *
+ * Pure — no orchestrator, no storage. Callers inject the candidate memories
+ * they already have from their normal recall pipeline. This keeps the
+ * module easy to test and integrates cleanly with the existing tiered-recall
+ * code in `orchestrator.ts` (the tier itself can be wired later; the pure
+ * surface is what PRs 5/6/7 will call).
  */
-declare const DEFAULT_POLL_INTERVAL_MS: number;
 /**
- * Validated, frozen view of `connectors.googleDrive.*`.
+ * A memory candidate as fed into review-context ranking. The shape is a
+ * deliberate subset of the core `MemorySummary` / recall result — only the
+ * fields we actually need — so this module stays decoupled from the rest of
+ * the codebase and can be reused by CLI tools, bench fixtures, etc.
  */
-interface GoogleDriveConnectorConfig {
-    readonly clientId: string;
-    readonly clientSecret: string;
-    readonly refreshToken: string;
-    /** Poll interval surfaced to the scheduler. */
-    readonly pollIntervalMs: number;
-    /** Folder ids to scope import to. Empty = "all accessible". */
-    readonly folderIds: readonly string[];
-}
-/**
- * Optional injection point for tests. The real connector dynamically imports
- * `googleapis`; tests pass a stub here to avoid the optional-peer-dep
- * machinery and to keep the test suite hermetic.
- *
- * The shape only covers the tiny slice of the SDK we actually use.
- */
-interface GoogleDriveClientFactory {
-    (config: GoogleDriveConnectorConfig): Promise<GoogleDriveClient>;
-}
-/**
- * Minimal Drive client surface. Tests provide a fake; production wraps
- * `googleapis` to fit. Method shapes mirror the upstream API where it
- * matters (`startPageToken` / `nextPageToken` / `newStartPageToken`,
- * `files.modifiedTime` ISO 8601 strings).
- */
-interface GoogleDriveClient {
-    /** Mirrors `drive.changes.getStartPageToken()`. */
-    getStartPageToken(): Promise<{
-        startPageToken: string;
-    }>;
+interface ReviewCandidate {
+    /** Opaque identifier. Echoed unchanged in the output. */
+    id: string;
     /**
-     * Mirrors `drive.changes.list(...)`. We page until the response yields a
-     * `newStartPageToken` (i.e., no more pages). Each `change.file`, when
-     * present, includes the metadata we need to decide whether to ingest.
+     * Pre-review relevance score from the upstream recall pipeline. Higher is
+     * better. `0` is treated as "no prior signal" and gets the full review
+     * boost when a path match is found.
      */
-    listChanges(args: {
-        pageToken: string;
-        pageSize: number;
-    }): Promise<DriveChangesPage>;
+    score: number;
     /**
-     * Export a Google-native doc to plaintext. Returns the body as a string.
+     * References the memory mentions (file paths, entity names, etc.). Used
+     * to decide whether any touched file appears in the memory's scope.
+     *
+     * Accepts `undefined`/missing so callers can pass sparse records from
+     * legacy storage without pre-filling.
      */
-    exportFile(args: {
-        fileId: string;
-        mimeType: string;
-    }): Promise<string>;
+    entityRefs?: string[];
+}
+interface ReviewContext {
     /**
-     * Download a non-Google-native file as a string. Used for `text/*` MIME
-     * types; binary formats are filtered out before we get here.
+     * Normalized file paths touched by the diff. Each entry is forward-slashed
+     * and relative to the repo root when possible.
      */
-    getFileMedia(args: {
-        fileId: string;
-    }): Promise<string>;
-}
-interface DriveChangesPage {
-    readonly changes: readonly DriveChange[];
-    readonly newStartPageToken?: string;
-    readonly nextPageToken?: string;
-}
-interface DriveChange {
-    readonly removed?: boolean;
-    readonly fileId?: string;
-    readonly file?: DriveFileMetadata;
-}
-interface DriveFileMetadata {
-    readonly id: string;
-    readonly name?: string;
-    readonly mimeType?: string;
-    readonly modifiedTime?: string;
-    readonly trashed?: boolean;
-    readonly parents?: readonly string[];
-    readonly webViewLink?: string;
-    readonly size?: string | number;
-}
-/**
- * Result of a single sync pass — exposed for richer test assertions.
- * Strict superset of `SyncIncrementalResult`.
- */
-interface GoogleDriveSyncResult extends SyncIncrementalResult {
-    readonly skippedBinary: number;
-    readonly skippedFolderScope: number;
-    readonly skippedTooLarge: number;
+    touchedFiles: string[];
+    /**
+     * Candidates re-sorted so memories whose `entityRefs` mention a touched
+     * path are boosted. Shape matches the input `ReviewCandidate[]` — the
+     * boost is recorded on each entry as `boost` for observability.
+     */
+    rankedRecall: Array<ReviewCandidate & {
+        boost: number;
+    }>;
 }
 /**
- * Validate and normalise raw config. Throws with a concrete message on any
- * malformed input — never silently defaults (CLAUDE.md gotcha #51).
- */
-declare function validateGoogleDriveConfig(raw: unknown): GoogleDriveConnectorConfig;
-/**
- * Construct the connector. The `clientFactory` argument is the test hook —
- * production callers omit it and the connector lazy-loads `googleapis`.
- */
-declare function createGoogleDriveConnector(options?: {
-    clientFactory?: GoogleDriveClientFactory;
-}): LiveConnector;
-/**
- * Production client factory. Lazy-loads `googleapis` via a computed-specifier
- * dynamic import so bundlers never statically resolve it (CLAUDE.md gotcha
- * #57). Surfaces a precise install hint on miss.
+ * `true` when the prompt looks like a review / diff-explanation request.
  *
- * Exported only for the `index.ts` barrel; consumers that already inject a
- * test factory don't need to touch this.
+ * Empty / non-string input → `false` (the caller shouldn't branch on an
+ * invalid prompt).
  */
-declare const defaultGoogleDriveClientFactory: GoogleDriveClientFactory;
-
+declare function isReviewPrompt(prompt: string | null | undefined): boolean;
 /**
- * @remnic/core — Notion live connector (issue #683 PR 3/N)
- *
- * Concrete `LiveConnector` implementation that incrementally imports text
- * content from Notion database pages into Remnic. Built on top of the
- * framework shipped in PR 1/N (`framework.ts` / `registry.ts` /
- * `state-store.ts`) and mirrors the structure of the Google Drive connector
- * (PR 2/N).
- *
- * Design notes:
- *
- *   - **Auth.** Integration token from config (`connectors.notion.token`).
- *     The token is accepted at config-parse time but never logged. Operators
- *     must populate it from a secret store; per the repo-wide privacy policy
- *     no real value may appear in tests or comments.
- *
- *   - **Scope.** `databaseIds` in config limits the import to the listed
- *     Notion databases. The connector queries each database for pages whose
- *     `last_edited_time` is after a per-page high-water mark stored in the
- *     cursor. When `databaseIds` is empty the connector does nothing (safe
- *     default — no credentials → no import).
- *
- *   - **Cursor semantics.** The cursor is a JSON string encoding a
- *     `NotionCursorPayload`: a map from page-id to last-seen
- *     `last_edited_time` ISO string. On the first sync (cursor=null) we
- *     seed the payload from the current state of each database WITHOUT
- *     importing any content, so "first install" doesn't re-ingest history.
- *     Each subsequent pass only imports pages edited after the stored
- *     watermark.
- *
- *   - **Block extraction.** Page content is fetched via
- *     `blocks.children.list` recursively up to `MAX_BLOCK_DEPTH` levels.
- *     Block text is extracted to Markdown-ish plain text (no raw JSON blobs).
- *     Only text-bearing block types are included; unsupported types are
- *     silently skipped.
- *
- *   - **Raw `fetch`.** We call the Notion REST API directly rather than using
- *     `@notionhq/client` — there is no optional-peer-dep machinery needed and
- *     the API surface we consume is tiny. The `fetchFn` argument is the test
- *     hook allowing stubbing without network access.
- *
- *   - **Idempotency.** `ConnectorDocument.source.externalId` is the page id
- *     and `externalRevision` is `last_edited_time`, so downstream dedup can
- *     recognise repeat fetches if the cursor is rewound.
- *
- *   - **Privacy.** No page content is ever logged. Database ids and counts
- *     may be logged. The integration token is never exposed in logs, state,
- *     or error messages.
+ * Parse a unified diff and return the set of files touched. Accepts both the
+ * `diff --git` form (`diff --git a/foo b/bar`) and the `--- / +++` form
+ * (`--- a/foo\n+++ b/bar`). Returns deduplicated, repo-root-relative paths
+ * (with the conventional `a/` / `b/` prefixes stripped).
  *
- *   - **Read-only.** This connector only reads. It never modifies pages,
- *     databases, or any other Notion resource.
- */
-
-/** Stable connector id. Lives in the registry under this exact string. */
-declare const NOTION_CONNECTOR_ID = "notion";
-/**
- * Cursor `kind` we emit. Opaque to the framework; documented here so
- * tests can assert on it.
- */
-declare const NOTION_CURSOR_KIND = "notionWatermark";
-/**
- * Default poll interval (5 minutes). Notion's API has no push capability;
- * polling sub-minute wastes quota for a personal memory layer.
- */
-declare const NOTION_DEFAULT_POLL_INTERVAL_MS: number;
-/**
- * Validated, frozen view of `connectors.notion.*`.
+ * Path entries of `/dev/null` (used in adds/deletes) are excluded.
  */
-interface NotionConnectorConfig {
-    /** Notion integration token. Starts with `secret_`. */
-    readonly token: string;
-    /** Database ids to import pages from. Empty = connector is a no-op. */
-    readonly databaseIds: readonly string[];
-    /** Poll interval surfaced to the scheduler (ms). */
-    readonly pollIntervalMs: number;
-}
+declare function parseTouchedFiles(diff: string | null | undefined): string[];
 /**
- * Minimal fetch-compatible surface we use. The real connector delegates to
- * the global `fetch`; tests inject a stub factory.
+ * Build a review-context ranking for a set of candidate memories.
+ *
+ * Contract:
+ *   - `touchedFiles` is the parsed diff file list.
+ *   - `candidates` is passed through unchanged when no boost applies.
+ *   - When a boost applies, the result is sorted by `(score + boost)` desc,
+ *     with a stable secondary sort on the original `id` for determinism
+ *     (CLAUDE.md #19 — comparators must return 0 for equal items).
  */
-type NotionFetchFn = (url: string, init: {
-    method: string;
-    headers: Record<string, string>;
-    body?: string;
-    signal?: AbortSignal;
-}) => Promise<{
-    ok: boolean;
-    status: number;
-    json(): Promise<unknown>;
+declare function rankReviewCandidates(candidates: ReviewCandidate[], touchedFiles: string[]): Array<ReviewCandidate & {
+    boost: number;
 }>;
+interface PackReviewContextInput {
+    /** Unified diff, as produced by `git diff`. */
+    diff: string | null | undefined;
+    /** Candidate memories from the upstream recall pipeline. */
+    candidates: ReviewCandidate[];
+}
 /**
- * Validate and normalise raw config. Throws with a concrete message on any
- * malformed input — never silently defaults (CLAUDE.md gotcha #51).
- */
-declare function validateNotionConfig(raw: unknown): NotionConnectorConfig;
-/**
- * Construct the connector. The `fetchFn` argument is the test hook —
- * production callers omit it and the connector uses the global `fetch`.
- */
-declare function createNotionConnector(options?: {
-    fetchFn?: NotionFetchFn;
-}): LiveConnector;
-
-/**
- * memory-extension-host/render-extensions-block.ts — Render discovered extensions
- * into a markdown block for injection into consolidation prompts.
+ * Top-level entry point used by the orchestrator (and CLI / bench) when a
+ * review-intent prompt is detected.
  *
- * Respects the global token budget (REMNIC_EXTENSIONS_TOTAL_TOKEN_LIMIT) and
- * truncates with a footer listing omitted extensions when over budget.
+ * Parses the diff, re-ranks the candidates, and returns both artefacts so
+ * the caller can surface `touchedFiles` as context and `rankedRecall` as
+ * the recall result.
  */
+declare function packReviewContext(input: PackReviewContextInput): ReviewContext;
 
 /**
- * Render a markdown block containing extension instructions for injection
- * into consolidation prompts.
+ * Binary file lifecycle management types.
  *
- * If the list is empty, returns "".
- * Inlines extensions in name order until the token budget is exhausted.
- * If the budget is exceeded, appends a truncation footer listing omitted extensions.
- */
-declare function renderExtensionsBlock(extensions: DiscoveredExtension[]): string;
-/**
- * Render a compact one-line footer listing active extension names.
- * Used by day-summary and summary-snapshot where full instructions are not needed.
- */
-declare function renderExtensionsFooter(extensions: DiscoveredExtension[]): string;
-
-/**
- * Strict UTC-only parser — accepts `YYYY-MM-DDTHH:MM:SS[.sss]Z`.
- * Returns milliseconds since epoch, or `null` if invalid.
- */
-declare function parseIsoUtcTimestamp(value: string): number | null;
-/**
- * Lenient parser — accepts variable-precision fractional seconds and either
- * a `Z` suffix or a `[+-]HH:MM` offset. Returns milliseconds since epoch, or
- * `null` if the string is not a well-formed RFC 3339 timestamp.
- */
-declare function parseIsoOffsetTimestamp(value: string): number | null;
-/**
- * Benchmark/adapter parser — accepts ISO date-only values plus reduced
- * precision date-times used by public benchmark fixtures. Returns milliseconds
- * since epoch, or `null` if invalid.
- */
-declare function parseFlexibleIsoTimestamp(value: string): number | null;
-
-/**
- * Intent-gated recall for active procedure memories (issue #519).
- */
-
-/**
- * Build markdown for the recall pipeline when procedural memory is enabled and
- * the prompt looks like task initiation.
- */
-declare function buildProcedureRecallSection(storage: StorageManager, prompt: string, config: PluginConfig): Promise<string | null>;
-
-/**
- * Procedural memory types (issue #519).
- * Bodies use ordered "## Step N" sections; machine fields live in frontmatter / structuredAttributes.
- */
-interface ProcedureStep {
-    order: number;
-    intent: string;
-    toolCall?: {
-        kind: string;
-        signature: string;
-    };
-    expectedOutcome?: string;
-    optional?: boolean;
-}
-/** Serialize steps into markdown body (human-editable). */
-declare function buildProcedureMarkdownBody(steps: ProcedureStep[]): string;
-/**
- * Best-effort parse of "## Step N" blocks into ProcedureStep records.
- * Returns null when no step headers are found.
- */
-declare function parseProcedureStepsFromBody(content: string): ProcedureStep[] | null;
-
-interface GitContext {
-    /**
-     * Stable identifier for the project. Derived from `git remote get-url origin`
-     * when an origin remote is configured, otherwise from the repo root path.
-     *
-     * Formatted as `origin:<hex>` or `root:<hex>` so that the source is visible
-     * to operators (see `remnic doctor`, issue #569 acceptance criteria).
-     */
-    projectId: string;
-    /**
-     * Current branch, e.g. `main`, `feat/foo`. `null` only in detached-HEAD
-     * state (e.g. rebase in progress). Callers should treat `null` as "no
-     * branch-scope overlay applies" without erroring.
-     */
-    branch: string | null;
-    /**
-     * Absolute path to the repository root (the directory containing `.git`).
-     * Tilde-expanded per CLAUDE.md #17.
-     */
-    rootPath: string;
-    /**
-     * Best-effort default branch (usually `main` or `master`). Derived from the
-     * `refs/remotes/origin/HEAD` symbolic ref. `null` when not available (e.g.
-     * fresh clone without a default branch symref, or no origin remote).
-     */
-    defaultBranch: string | null;
-}
-/**
- * Injectable git-invocation surface. Only the commands `resolveGitContext`
- * actually needs are exposed. Tests inject a mock implementation to avoid
- * spawning a real git process.
- */
-interface GitInvoker {
-    /**
-     * Run `git <args>` with `cwd` as the working directory. Must return
-     * `{ stdout, exitCode }` with `stdout` trimmed by the caller as needed.
-     * Implementations should NOT throw for non-zero exit codes — they should
-     * return the exit code so the resolver can decide how to recover.
-     */
-    (cwd: string, args: string[]): {
-        stdout: string;
-        exitCode: number;
-    };
-}
-/**
- * Non-cryptographic stable hash. Used only to derive a deterministic
- * `projectId` from either the origin URL or the root path. The hash does not
- * need to be collision-resistant against adversarial input — it is purely a
- * namespace discriminator.
- *
- * Uses FNV-1a 32-bit so we don't pull in `node:crypto` for a simple bucket
- * key. Output is lowercase hex, zero-padded to 8 characters.
- */
-declare function stableHash(input: string): string;
-/**
- * Normalize a git remote URL so that equivalent SSH / HTTPS forms of the
- * same repo produce the same `projectId`. Handles:
- *   - `git@github.com:foo/bar.git`  → `github.com/foo/bar`
- *   - `https://github.com/foo/bar`  → `github.com/foo/bar`
- *   - `https://github.com/foo/bar.git` → `github.com/foo/bar`
- *   - `ssh://git@github.com/foo/bar` → `github.com/foo/bar`
- *   - `ssh://git@github.com:2222/foo/bar` → `github.com/foo/bar` (port stripped)
- *
- * Case-insensitive (remote hostnames and most repo paths on major forges are
- * case-insensitive in practice).
- */
-declare function normalizeOriginUrl(rawUrl: string): string;
-interface ResolveGitContextOptions {
-    /** Inject a git invoker (tests). Defaults to spawning real `git`. */
-    invoker?: GitInvoker;
-}
-/**
- * Detect the git project + branch for `cwd`.
- *
- * Returns `null` when:
- *   - `cwd` is not an absolute path (invalid input, CLAUDE.md #51)
- *   - `cwd` is not inside a git worktree
- *   - `git` is not available on PATH
- *
- * Never throws.
- */
-declare function resolveGitContext(cwd: string, options?: ResolveGitContextOptions): Promise<GitContext | null>;
-
-/**
- * Diff-aware review-context packer (issue #569 PR 4).
- *
- * When an agent is asked "review this PR" / "what changed in this diff" /
- * "look at this diff", the prompt that reaches recall is short and generic
- * — the real signal is the diff itself. This module:
- *
- *   1. Detects review-intent prompts via `isReviewPrompt`.
- *   2. Extracts the touched file list from a unified diff via
- *      `parseTouchedFiles`.
- *   3. Re-ranks a set of candidate memories so that memories whose
- *      `entityRefs` mention a touched path float to the top. The boost is
- *      additive and bounded so it doesn't obliterate the original ranking —
- *      it's a bias, not a filter.
- *
- * Pure — no orchestrator, no storage. Callers inject the candidate memories
- * they already have from their normal recall pipeline. This keeps the
- * module easy to test and integrates cleanly with the existing tiered-recall
- * code in `orchestrator.ts` (the tier itself can be wired later; the pure
- * surface is what PRs 5/6/7 will call).
- */
-/**
- * A memory candidate as fed into review-context ranking. The shape is a
- * deliberate subset of the core `MemorySummary` / recall result — only the
- * fields we actually need — so this module stays decoupled from the rest of
- * the codebase and can be reused by CLI tools, bench fixtures, etc.
- */
-interface ReviewCandidate {
-    /** Opaque identifier. Echoed unchanged in the output. */
-    id: string;
-    /**
-     * Pre-review relevance score from the upstream recall pipeline. Higher is
-     * better. `0` is treated as "no prior signal" and gets the full review
-     * boost when a path match is found.
-     */
-    score: number;
-    /**
-     * References the memory mentions (file paths, entity names, etc.). Used
-     * to decide whether any touched file appears in the memory's scope.
-     *
-     * Accepts `undefined`/missing so callers can pass sparse records from
-     * legacy storage without pre-filling.
-     */
-    entityRefs?: string[];
-}
-interface ReviewContext {
-    /**
-     * Normalized file paths touched by the diff. Each entry is forward-slashed
-     * and relative to the repo root when possible.
-     */
-    touchedFiles: string[];
-    /**
-     * Candidates re-sorted so memories whose `entityRefs` mention a touched
-     * path are boosted. Shape matches the input `ReviewCandidate[]` — the
-     * boost is recorded on each entry as `boost` for observability.
-     */
-    rankedRecall: Array<ReviewCandidate & {
-        boost: number;
-    }>;
-}
-/**
- * `true` when the prompt looks like a review / diff-explanation request.
- *
- * Empty / non-string input → `false` (the caller shouldn't branch on an
- * invalid prompt).
- */
-declare function isReviewPrompt(prompt: string | null | undefined): boolean;
-/**
- * Parse a unified diff and return the set of files touched. Accepts both the
- * `diff --git` form (`diff --git a/foo b/bar`) and the `--- / +++` form
- * (`--- a/foo\n+++ b/bar`). Returns deduplicated, repo-root-relative paths
- * (with the conventional `a/` / `b/` prefixes stripped).
- *
- * Path entries of `/dev/null` (used in adds/deletes) are excluded.
- */
-declare function parseTouchedFiles(diff: string | null | undefined): string[];
-/**
- * Build a review-context ranking for a set of candidate memories.
- *
- * Contract:
- *   - `touchedFiles` is the parsed diff file list.
- *   - `candidates` is passed through unchanged when no boost applies.
- *   - When a boost applies, the result is sorted by `(score + boost)` desc,
- *     with a stable secondary sort on the original `id` for determinism
- *     (CLAUDE.md #19 — comparators must return 0 for equal items).
- */
-declare function rankReviewCandidates(candidates: ReviewCandidate[], touchedFiles: string[]): Array<ReviewCandidate & {
-    boost: number;
-}>;
-interface PackReviewContextInput {
-    /** Unified diff, as produced by `git diff`. */
-    diff: string | null | undefined;
-    /** Candidate memories from the upstream recall pipeline. */
-    candidates: ReviewCandidate[];
-}
-/**
- * Top-level entry point used by the orchestrator (and CLI / bench) when a
- * review-intent prompt is detected.
- *
- * Parses the diff, re-ranks the candidates, and returns both artefacts so
- * the caller can surface `touchedFiles` as context and `rankedRecall` as
- * the recall result.
- */
-declare function packReviewContext(input: PackReviewContextInput): ReviewContext;
-
-/**
- * Binary file lifecycle management types.
- *
- * Defines the configuration, manifest, and record structures for the
- * three-stage binary lifecycle pipeline: mirror, redirect, clean.
+ * Defines the configuration, manifest, and record structures for the
+ * three-stage binary lifecycle pipeline: mirror, redirect, clean.
  */
 interface BinaryLifecycleConfig {
     /** Master toggle. Default: false. */
@@ -1520,6 +1161,366 @@ declare function watchForChanges(options: SyncOptions, onChange: (changes: FileC
     stop: () => void;
 };
 
+/**
+ * memory-extension-host/render-extensions-block.ts — Render discovered extensions
+ * into a markdown block for injection into consolidation prompts.
+ *
+ * Respects the global token budget (REMNIC_EXTENSIONS_TOTAL_TOKEN_LIMIT) and
+ * truncates with a footer listing omitted extensions when over budget.
+ */
+
+/**
+ * Render a markdown block containing extension instructions for injection
+ * into consolidation prompts.
+ *
+ * If the list is empty, returns "".
+ * Inlines extensions in name order until the token budget is exhausted.
+ * If the budget is exceeded, appends a truncation footer listing omitted extensions.
+ */
+declare function renderExtensionsBlock(extensions: DiscoveredExtension[]): string;
+/**
+ * Render a compact one-line footer listing active extension names.
+ * Used by day-summary and summary-snapshot where full instructions are not needed.
+ */
+declare function renderExtensionsFooter(extensions: DiscoveredExtension[]): string;
+
+/**
+ * @remnic/core — Live Connectors Registry (issue #683 PR 1/N)
+ *
+ * Pure in-memory registry. No I/O. Concrete connectors register themselves at
+ * orchestrator boot (later PRs); the maintenance scheduler asks the registry
+ * for the active set when running due syncs.
+ */
+
+/**
+ * Thrown when registering a duplicate id or an id that fails validation.
+ *
+ * Distinct error class so callers can distinguish framework-level mistakes
+ * (which are programmer errors) from connector-runtime failures.
+ */
+declare class LiveConnectorRegistryError extends Error {
+    constructor(message: string);
+}
+/**
+ * In-memory registry of live connectors. One instance per orchestrator. Not
+ * safe for cross-process sharing — wire each process to its own registry.
+ */
+declare class LiveConnectorRegistry {
+    private readonly connectors;
+    /**
+     * Register a connector. Throws `LiveConnectorRegistryError` if the id is
+     * malformed or already registered.
+     *
+     * Re-registration is rejected (rather than silently overwriting) because
+     * silent overwrites mask plugin loading bugs in development and could let
+     * a malicious extension shadow a built-in connector.
+     */
+    register(connector: LiveConnector): void;
+    /**
+     * Look up a connector by id. Returns `undefined` if not registered.
+     */
+    get(id: string): LiveConnector | undefined;
+    /**
+     * Return all registered connectors, sorted by id for stable enumeration.
+     */
+    list(): LiveConnector[];
+    /**
+     * Remove a connector. Returns `true` if a connector was removed, `false`
+     * otherwise. The cursor / state file on disk is **not** touched — callers
+     * who want to fully decommission a connector must also delete its state
+     * file via the `state-store` module.
+     */
+    unregister(id: string): boolean;
+    /**
+     * Number of registered connectors. Cheap; safe to call frequently.
+     */
+    size(): number;
+}
+
+/**
+ * @remnic/core — Google Drive live connector (issue #683 PR 2/N)
+ *
+ * Concrete `LiveConnector` implementation that incrementally imports text
+ * content from a user's Google Drive into Remnic. Built on top of the
+ * framework shipped in PR 1/N (`framework.ts` / `registry.ts` /
+ * `state-store.ts`).
+ *
+ * Design notes:
+ *
+ *   - **Cursor semantics.** We page Drive with the official `changes` API
+ *     when a `startPageToken` is available. The cursor is opaque from the
+ *     framework's POV (`{kind: "drivePageToken", value: ...}`), and on the
+ *     very first sync (cursor=null) we call `changes.getStartPageToken()`
+ *     to seed it without importing anything. This matches the documented
+ *     Drive incremental-sync recipe and means re-runs never re-ingest the
+ *     same file as long as the cursor file survives.
+ *
+ *   - **Folder scope.** When `folderIds` is non-empty, files are filtered
+ *     to those whose `parents` intersect the configured folder set. Drive
+ *     does not currently support server-side parent filtering on the
+ *     `changes.list` endpoint, so we pull the change record's `file` payload
+ *     and apply the filter on our side. Folder ids are validated up front so
+ *     a typo in config doesn't silently cause a broad import.
+ *
+ *   - **Content extraction.** Google-native MIME types
+ *     (`application/vnd.google-apps.{document,spreadsheet,presentation}`)
+ *     are exported via `files.export` to plaintext. Plain-text MIME types
+ *     are pulled with `files.get?alt=media`. Everything else is skipped —
+ *     bytes from binary formats (images, PDFs, archives) belong in the
+ *     binary-lifecycle pipeline, not in the textual ingestion path.
+ *
+ *   - **Idempotency.** Each emitted `ConnectorDocument.source` carries
+ *     `externalId = file.id` plus `externalRevision = file.modifiedTime`,
+ *     so downstream dedup (CLAUDE.md gotcha #44 — never index content that
+ *     failed to persist) can recognise repeat fetches even if the cursor is
+ *     manually rewound.
+ *
+ *   - **Privacy.** No document content is ever logged. Folder ids and
+ *     counts may be logged. OAuth credentials (`clientId`,
+ *     `clientSecret`, `refreshToken`) are accepted via config but the
+ *     intent is for callers to populate them from a secret store; we never
+ *     persist credentials through the connector state-store. Per CLAUDE.md
+ *     repository-privacy rules, no real credentials may appear in tests,
+ *     fixtures, or comments.
+ *
+ *   - **À-la-carte packaging (CLAUDE.md gotcha #57).** `googleapis` is NOT
+ *     listed as a hard dependency of `@remnic/core`. It is loaded via a
+ *     computed-specifier dynamic import (`await import("google" + "apis")`)
+ *     so bundlers cannot statically resolve it, and it is declared as an
+ *     optional peer dependency. Operators who never enable the connector
+ *     pay nothing for it.
+ *
+ *   - **Read-only.** This connector only reads. It never marks files as
+ *     read, edits metadata, or modifies sharing settings.
+ */
+
+/**
+ * Stable connector id. Lives in the registry under this exact string.
+ */
+declare const GOOGLE_DRIVE_CONNECTOR_ID = "google-drive";
+/**
+ * Cursor `kind` we emit. Treated as opaque by the framework; documented
+ * here so tests can assert on it.
+ */
+declare const GOOGLE_DRIVE_CURSOR_KIND = "drivePageToken";
+/**
+ * Default poll interval (5 minutes). Surfaced in `openclaw.plugin.json`
+ * defaults and in the documented config schema. Drive's `changes.list`
+ * endpoint is cheap, but polling sub-minute is wasteful for a personal
+ * memory layer.
+ */
+declare const DEFAULT_POLL_INTERVAL_MS: number;
+/**
+ * Validated, frozen view of `connectors.googleDrive.*`.
+ */
+interface GoogleDriveConnectorConfig {
+    readonly clientId: string;
+    readonly clientSecret: string;
+    readonly refreshToken: string;
+    /** Poll interval surfaced to the scheduler. */
+    readonly pollIntervalMs: number;
+    /** Folder ids to scope import to. Empty = "all accessible". */
+    readonly folderIds: readonly string[];
+}
+/**
+ * Optional injection point for tests. The real connector dynamically imports
+ * `googleapis`; tests pass a stub here to avoid the optional-peer-dep
+ * machinery and to keep the test suite hermetic.
+ *
+ * The shape only covers the tiny slice of the SDK we actually use.
+ */
+interface GoogleDriveClientFactory {
+    (config: GoogleDriveConnectorConfig): Promise<GoogleDriveClient>;
+}
+/**
+ * Minimal Drive client surface. Tests provide a fake; production wraps
+ * `googleapis` to fit. Method shapes mirror the upstream API where it
+ * matters (`startPageToken` / `nextPageToken` / `newStartPageToken`,
+ * `files.modifiedTime` ISO 8601 strings).
+ */
+interface GoogleDriveClient {
+    /** Mirrors `drive.changes.getStartPageToken()`. */
+    getStartPageToken(): Promise<{
+        startPageToken: string;
+    }>;
+    /**
+     * Mirrors `drive.changes.list(...)`. We page until the response yields a
+     * `newStartPageToken` (i.e., no more pages). Each `change.file`, when
+     * present, includes the metadata we need to decide whether to ingest.
+     */
+    listChanges(args: {
+        pageToken: string;
+        pageSize: number;
+    }): Promise<DriveChangesPage>;
+    /**
+     * Export a Google-native doc to plaintext. Returns the body as a string.
+     */
+    exportFile(args: {
+        fileId: string;
+        mimeType: string;
+    }): Promise<string>;
+    /**
+     * Download a non-Google-native file as a string. Used for `text/*` MIME
+     * types; binary formats are filtered out before we get here.
+     */
+    getFileMedia(args: {
+        fileId: string;
+    }): Promise<string>;
+}
+interface DriveChangesPage {
+    readonly changes: readonly DriveChange[];
+    readonly newStartPageToken?: string;
+    readonly nextPageToken?: string;
+}
+interface DriveChange {
+    readonly removed?: boolean;
+    readonly fileId?: string;
+    readonly file?: DriveFileMetadata;
+}
+interface DriveFileMetadata {
+    readonly id: string;
+    readonly name?: string;
+    readonly mimeType?: string;
+    readonly modifiedTime?: string;
+    readonly trashed?: boolean;
+    readonly parents?: readonly string[];
+    readonly webViewLink?: string;
+    readonly size?: string | number;
+}
+/**
+ * Result of a single sync pass — exposed for richer test assertions.
+ * Strict superset of `SyncIncrementalResult`.
+ */
+interface GoogleDriveSyncResult extends SyncIncrementalResult {
+    readonly skippedBinary: number;
+    readonly skippedFolderScope: number;
+    readonly skippedTooLarge: number;
+}
+/**
+ * Validate and normalise raw config. Throws with a concrete message on any
+ * malformed input — never silently defaults (CLAUDE.md gotcha #51).
+ */
+declare function validateGoogleDriveConfig(raw: unknown): GoogleDriveConnectorConfig;
+/**
+ * Construct the connector. The `clientFactory` argument is the test hook —
+ * production callers omit it and the connector lazy-loads `googleapis`.
+ */
+declare function createGoogleDriveConnector(options?: {
+    clientFactory?: GoogleDriveClientFactory;
+}): LiveConnector;
+/**
+ * Production client factory. Lazy-loads `googleapis` via a computed-specifier
+ * dynamic import so bundlers never statically resolve it (CLAUDE.md gotcha
+ * #57). Surfaces a precise install hint on miss.
+ *
+ * Exported only for the `index.ts` barrel; consumers that already inject a
+ * test factory don't need to touch this.
+ */
+declare const defaultGoogleDriveClientFactory: GoogleDriveClientFactory;
+
+/**
+ * @remnic/core — Notion live connector (issue #683 PR 3/N)
+ *
+ * Concrete `LiveConnector` implementation that incrementally imports text
+ * content from Notion database pages into Remnic. Built on top of the
+ * framework shipped in PR 1/N (`framework.ts` / `registry.ts` /
+ * `state-store.ts`) and mirrors the structure of the Google Drive connector
+ * (PR 2/N).
+ *
+ * Design notes:
+ *
+ *   - **Auth.** Integration token from config (`connectors.notion.token`).
+ *     The token is accepted at config-parse time but never logged. Operators
+ *     must populate it from a secret store; per the repo-wide privacy policy
+ *     no real value may appear in tests or comments.
+ *
+ *   - **Scope.** `databaseIds` in config limits the import to the listed
+ *     Notion databases. The connector queries each database for pages whose
+ *     `last_edited_time` is after a per-page high-water mark stored in the
+ *     cursor. When `databaseIds` is empty the connector does nothing (safe
+ *     default — no credentials → no import).
+ *
+ *   - **Cursor semantics.** The cursor is a JSON string encoding a
+ *     `NotionCursorPayload`: a map from page-id to last-seen
+ *     `last_edited_time` ISO string. On the first sync (cursor=null) we
+ *     seed the payload from the current state of each database WITHOUT
+ *     importing any content, so "first install" doesn't re-ingest history.
+ *     Each subsequent pass only imports pages edited after the stored
+ *     watermark.
+ *
+ *   - **Block extraction.** Page content is fetched via
+ *     `blocks.children.list` recursively up to `MAX_BLOCK_DEPTH` levels.
+ *     Block text is extracted to Markdown-ish plain text (no raw JSON blobs).
+ *     Only text-bearing block types are included; unsupported types are
+ *     silently skipped.
+ *
+ *   - **Raw `fetch`.** We call the Notion REST API directly rather than using
+ *     `@notionhq/client` — there is no optional-peer-dep machinery needed and
+ *     the API surface we consume is tiny. The `fetchFn` argument is the test
+ *     hook allowing stubbing without network access.
+ *
+ *   - **Idempotency.** `ConnectorDocument.source.externalId` is the page id
+ *     and `externalRevision` is `last_edited_time`, so downstream dedup can
+ *     recognise repeat fetches if the cursor is rewound.
+ *
+ *   - **Privacy.** No page content is ever logged. Database ids and counts
+ *     may be logged. The integration token is never exposed in logs, state,
+ *     or error messages.
+ *
+ *   - **Read-only.** This connector only reads. It never modifies pages,
+ *     databases, or any other Notion resource.
+ */
+
+/** Stable connector id. Lives in the registry under this exact string. */
+declare const NOTION_CONNECTOR_ID = "notion";
+/**
+ * Cursor `kind` we emit. Opaque to the framework; documented here so
+ * tests can assert on it.
+ */
+declare const NOTION_CURSOR_KIND = "notionWatermark";
+/**
+ * Default poll interval (5 minutes). Notion's API has no push capability;
+ * polling sub-minute wastes quota for a personal memory layer.
+ */
+declare const NOTION_DEFAULT_POLL_INTERVAL_MS: number;
+/**
+ * Validated, frozen view of `connectors.notion.*`.
+ */
+interface NotionConnectorConfig {
+    /** Notion integration token. Starts with `secret_`. */
+    readonly token: string;
+    /** Database ids to import pages from. Empty = connector is a no-op. */
+    readonly databaseIds: readonly string[];
+    /** Poll interval surfaced to the scheduler (ms). */
+    readonly pollIntervalMs: number;
+}
+/**
+ * Minimal fetch-compatible surface we use. The real connector delegates to
+ * the global `fetch`; tests inject a stub factory.
+ */
+type NotionFetchFn = (url: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body?: string;
+    signal?: AbortSignal;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    json(): Promise<unknown>;
+}>;
+/**
+ * Validate and normalise raw config. Throws with a concrete message on any
+ * malformed input — never silently defaults (CLAUDE.md gotcha #51).
+ */
+declare function validateNotionConfig(raw: unknown): NotionConnectorConfig;
+/**
+ * Construct the connector. The `fetchFn` argument is the test hook —
+ * production callers omit it and the connector uses the global `fetch`.
+ */
+declare function createNotionConnector(options?: {
+    fetchFn?: NotionFetchFn;
+}): LiveConnector;
+
 /**
  * @remnic/core — Spaces + Collaboration
  *