@rubytech/create-maxy-code 0.1.158 → 0.1.161

package/payload/platform/plugins/admin/hooks/__tests__/per-turn-graph-pass-gate.test.sh

@@ -0,0 +1,361 @@
+#!/usr/bin/env bash
+# Task 440 — per-turn-graph-pass-gate Stop hook test suite.
+#
+# Mirrors session-end-retrospective.test.sh's listener-mock pattern. Local
+# Python HTTP server stands in for /api/admin/log-ingest and records every
+# POST so the assertions read every log line the hook emitted.
+#
+# Contract under test:
+#   - Role/specialist gates: exit 0, single trigger-skipped log line, no
+#     stderr.
+#       role-not-admin | is-specialist | empty-stdin | missing-transcript
+#   - No real-user record in transcript (e.g. SessionStart bootstrap, or
+#     only tool_result-shaped user records): exit 0, single
+#     `trigger-skipped reason=no-real-user` line, no stderr.
+#   - Block path — admin's turn since the latest real-user message contains
+#     no `Task(database-operator)` dispatch and no `pre-turn-graph-pass-skip`
+#     tool_use: exit 2, stderr carries the instruction block,
+#     `gate-blocked sessionId=<id> reason=sentinel-absent` emitted.
+#   - Release via dispatch — a `Task` tool_use with
+#     `input.subagent_type=database-operator` appears AFTER the latest
+#     real-user message: exit 0, `gate-released sessionId=<id> via=dispatch`.
+#   - Release via skip-sentinel — a `tool_use` named
+#     `mcp__admin__pre-turn-graph-pass-skip` appears AFTER the latest
+#     real-user message: exit 0,
+#     `gate-released sessionId=<id> via=skip-sentinel`.
+#   - Per-prompt scoping — a dispatch BEFORE the latest real-user message
+#     does NOT release the gate.
+#   - Re-entry — a second Stop fired after the release tool_use still
+#     releases (the JSONL grep is the re-entry guard, no loop).
+
+set -u
+
+HOOK="$(cd "$(dirname "$0")/.." && pwd)/per-turn-graph-pass-gate.sh"
+if [[ ! -x "$HOOK" ]]; then
+  echo "FAIL: $HOOK not executable" >&2
+  exit 1
+fi
+
+OP_ID='aaaaaaaa-1111-2222-3333-bbbbbbbbbbbb'
+
+TMPFILES=()
+LISTENER_PIDS=()
+cleanup_test_state() {
+  for pid in "${LISTENER_PIDS[@]:-}"; do
+    if [[ -n "$pid" ]]; then
+      kill "$pid" 2>/dev/null || true
+      wait "$pid" 2>/dev/null || true
+    fi
+  done
+  for f in "${TMPFILES[@]:-}"; do
+    [[ -n "$f" ]] && rm -f "$f" 2>/dev/null || true
+  done
+}
+trap cleanup_test_state EXIT
+
+PASS=0
+FAIL=0
+pass() { echo "PASS: $1"; PASS=$((PASS + 1)); }
+fail() { echo "FAIL: $1" >&2; FAIL=$((FAIL + 1)); }
+
+start_listener() {
+  REQ_LOG=$(mktemp); TMPFILES+=("$REQ_LOG")
+  LISTENER_PORT=$((39800 + RANDOM % 100))
+  python3 - "$LISTENER_PORT" "$REQ_LOG" <<'PY' &
+import sys, http.server, json
+port = int(sys.argv[1])
+log_path = sys.argv[2]
+class H(http.server.BaseHTTPRequestHandler):
+  def log_message(self, *a, **k): pass
+  def do_POST(self):
+    n = int(self.headers.get('Content-Length','0') or 0)
+    body = self.rfile.read(n).decode('utf-8','replace')
+    with open(log_path, 'a', encoding='utf-8') as f:
+      f.write(self.path + '\t' + body + '\n')
+    self.send_response(200)
+    self.send_header('Content-Type','application/json')
+    self.end_headers()
+    self.wfile.write(json.dumps({"ok": True}).encode('utf-8'))
+http.server.HTTPServer(('127.0.0.1', port), H).serve_forever()
+PY
+  LISTENER_PIDS+=("$!")
+  for _ in $(seq 1 20); do
+    if curl -sS --max-time 1 -X POST "http://127.0.0.1:${LISTENER_PORT}/ping" -d '{}' >/dev/null 2>&1; then
+      break
+    fi
+    sleep 0.1
+  done
+  : > "$REQ_LOG"
+}
+
+run_hook() {
+  local role="$1"; local specialist="$2"; local stdin_json="$3"
+  local stderr_file; stderr_file=$(mktemp); TMPFILES+=("$stderr_file")
+  local stdout_file; stdout_file=$(mktemp); TMPFILES+=("$stdout_file")
+  printf '%s' "$stdin_json" | \
+    MAXY_SESSION_ROLE="$role" \
+    MAXY_SPECIALIST="$specialist" \
+    MAXY_UI_INTERNAL_PORT="$LISTENER_PORT" \
+    bash "$HOOK" >"$stdout_file" 2>"$stderr_file"
+  HOOK_RC=$?
+  HOOK_STDERR=$(cat "$stderr_file")
+  HOOK_STDOUT=$(cat "$stdout_file")
+  sleep 0.1
+}
+
+ingest_lines() {
+  grep -E '^/api/admin/log-ingest	' "$REQ_LOG" 2>/dev/null | python3 -c '
+import sys, json
+for raw in sys.stdin:
+  try:
+    _, body = raw.rstrip("\n").split("\t", 1)
+    d = json.loads(body)
+    if isinstance(d, dict) and isinstance(d.get("line"), str):
+      print(d["line"])
+  except Exception:
+    pass
+' || true
+}
+
+# write_transcript: builds JSONL from positional specs.
+# Spec format: <role>|<text>|<extra>
+#   extra "" — plain text record
+#   extra "tool_result" — user record carrying only a tool_result block
+#   extra "tool_use:<NAME>" — assistant record with a tool_use block (no input)
+#   extra "task:<subagent_type>" — assistant record with a Task tool_use whose
+#                                  input.subagent_type equals <subagent_type>
+write_transcript() {
+  local out="$1"; shift
+  python3 - "$out" "$@" <<'PY'
+import sys, json
+out = sys.argv[1]
+spec = sys.argv[2:]
+with open(out, "w", encoding="utf-8") as f:
+    for entry in spec:
+        role, text, extra = entry.split("|", 2)
+        rec = {"type": role, "timestamp": "2026-05-26T10:00:00.000Z"}
+        if role == "user":
+            if extra == "tool_result":
+                rec["message"] = {
+                    "role": "user",
+                    "content": [
+                        {"type": "tool_result", "tool_use_id": "tu_x", "content": text or "ok"},
+                    ],
+                }
+            else:
+                rec["message"] = {"role": "user", "content": text}
+        else:
+            content_blocks = []
+            if text:
+                content_blocks.append({"type": "text", "text": text})
+            if extra.startswith("tool_use:"):
+                tool_name = extra.split(":", 1)[1]
+                content_blocks.append({
+                    "type": "tool_use",
+                    "id": f"toolu_{tool_name}",
+                    "name": tool_name,
+                    "input": {},
+                })
+            elif extra.startswith("task:"):
+                subagent = extra.split(":", 1)[1]
+                content_blocks.append({
+                    "type": "tool_use",
+                    "id": f"toolu_task_{subagent}",
+                    "name": "Task",
+                    "input": {"subagent_type": subagent, "description": "test", "prompt": "test"},
+                })
+            rec["message"] = {
+                "id": f"msg_{role}_{hash(text) & 0xffff:04x}",
+                "role": "assistant",
+                "content": content_blocks,
+            }
+        f.write(json.dumps(rec) + "\n")
+PY
+}
+
+envelope_for() {
+  python3 -c '
+import json, sys
+print(json.dumps({"session_id": sys.argv[1], "transcript_path": sys.argv[2]}))
+' "$1" "$2"
+}
+
+INSTRUCTION_TOKEN='Before this turn closes, do the per-turn graph pass'
+
+# ---------------------------------------------------------------------------
+# Case 1: role != admin → trigger-skipped reason=role-not-admin
+# ---------------------------------------------------------------------------
+start_listener
+TR_BASIC=$(mktemp); TMPFILES+=("$TR_BASIC")
+write_transcript "$TR_BASIC" "user|hello|" "assistant|hi|"
+ENV_BASIC=$(envelope_for "$OP_ID" "$TR_BASIC")
+: > "$REQ_LOG"
+run_hook "public" "" "$ENV_BASIC"
+[[ "$HOOK_RC" -eq 0 ]] || fail "case-1 rc=$HOOK_RC"
+[[ -z "$HOOK_STDERR" ]] || fail "case-1 stderr must be empty"
+if ingest_lines | grep -qE "^trigger-skipped sessionId=${OP_ID} reason=role-not-admin$"; then
+  pass "case-1 role=public → trigger-skipped reason=role-not-admin"
+else
+  fail "case-1 expected role-not-admin, got: $(ingest_lines)"
+fi
+
+# ---------------------------------------------------------------------------
+# Case 2: MAXY_SPECIALIST set → trigger-skipped reason=is-specialist
+# ---------------------------------------------------------------------------
+: > "$REQ_LOG"
+run_hook "admin" "database-operator" "$ENV_BASIC"
+[[ "$HOOK_RC" -eq 0 ]] || fail "case-2 rc=$HOOK_RC"
+[[ -z "$HOOK_STDERR" ]] || fail "case-2 stderr must be empty"
+if ingest_lines | grep -qE "^trigger-skipped sessionId=${OP_ID} reason=is-specialist specialist=database-operator$"; then
+  pass "case-2 specialist=database-operator → trigger-skipped is-specialist"
+else
+  fail "case-2 expected is-specialist, got: $(ingest_lines)"
+fi
+
+# ---------------------------------------------------------------------------
+# Case 3: empty stdin → trigger-skipped reason=empty-stdin
+# ---------------------------------------------------------------------------
+: > "$REQ_LOG"
+run_hook "admin" "" ""
+[[ "$HOOK_RC" -eq 0 ]] || fail "case-3 rc=$HOOK_RC"
+if ingest_lines | grep -qE "^trigger-skipped sessionId=.* reason=empty-stdin$"; then
+  pass "case-3 empty stdin → trigger-skipped reason=empty-stdin"
+else
+  fail "case-3 expected empty-stdin, got: $(ingest_lines)"
+fi
+
+# ---------------------------------------------------------------------------
+# Case 4: missing transcript_path → trigger-skipped reason=missing-transcript
+# ---------------------------------------------------------------------------
+BAD_ENV=$(python3 -c 'import json,sys; print(json.dumps({"session_id": sys.argv[1]}))' "$OP_ID")
+: > "$REQ_LOG"
+run_hook "admin" "" "$BAD_ENV"
+[[ "$HOOK_RC" -eq 0 ]] || fail "case-4 rc=$HOOK_RC"
+if ingest_lines | grep -qE "^trigger-skipped sessionId=${OP_ID} reason=missing-transcript$"; then
+  pass "case-4 missing transcript → trigger-skipped reason=missing-transcript"
+else
+  fail "case-4 expected missing-transcript, got: $(ingest_lines)"
+fi
+
+# ---------------------------------------------------------------------------
+# Case 5: no real-user record in transcript → trigger-skipped no-real-user
+# ---------------------------------------------------------------------------
+TR_NO_USER=$(mktemp); TMPFILES+=("$TR_NO_USER")
+# Only a tool_result-shaped user record + an assistant record. The hook should
+# treat this as "no real user yet" and trigger-skip.
+write_transcript "$TR_NO_USER" "user|ok|tool_result" "assistant|booting|"
+ENV_NO_USER=$(envelope_for "$OP_ID" "$TR_NO_USER")
+: > "$REQ_LOG"
+run_hook "admin" "" "$ENV_NO_USER"
+[[ "$HOOK_RC" -eq 0 ]] || fail "case-5 rc=$HOOK_RC"
+[[ -z "$HOOK_STDERR" ]] || fail "case-5 stderr must be empty"
+if ingest_lines | grep -qE "^trigger-skipped sessionId=${OP_ID} reason=no-real-user$"; then
+  pass "case-5 only tool_result-user records → trigger-skipped no-real-user"
+else
+  fail "case-5 expected no-real-user, got: $(ingest_lines)"
+fi
+
+# ---------------------------------------------------------------------------
+# Case 6: gate-blocked — admin replied to operator without dispatching or
+# calling the skip sentinel.
+# ---------------------------------------------------------------------------
+TR_BLOCKED=$(mktemp); TMPFILES+=("$TR_BLOCKED")
+write_transcript "$TR_BLOCKED" "user|hello|" "assistant|hi there|"
+ENV_BLOCKED=$(envelope_for "$OP_ID" "$TR_BLOCKED")
+: > "$REQ_LOG"
+run_hook "admin" "" "$ENV_BLOCKED"
+[[ "$HOOK_RC" -eq 2 ]] || fail "case-6 expected rc=2, got $HOOK_RC"
+if ! printf '%s' "$HOOK_STDERR" | grep -qF "$INSTRUCTION_TOKEN"; then
+  fail "case-6 stderr must contain instruction token; got: $HOOK_STDERR"
+fi
+if ingest_lines | grep -qE "^gate-blocked sessionId=${OP_ID} reason=sentinel-absent$"; then
+  pass "case-6 admin replied without dispatch/skip → gate-blocked + stderr instruction + rc=2"
+else
+  fail "case-6 expected gate-blocked, got: $(ingest_lines)"
+fi
+
+# ---------------------------------------------------------------------------
+# Case 7: release via dispatch — admin issued Task(database-operator) AFTER
+# the latest real-user message.
+# ---------------------------------------------------------------------------
+TR_DISPATCH=$(mktemp); TMPFILES+=("$TR_DISPATCH")
+write_transcript "$TR_DISPATCH" \
+  "user|tell me about Alice|" \
+  "assistant|dispatching|task:database-operator" \
+  "assistant|done|"
+ENV_DISPATCH=$(envelope_for "$OP_ID" "$TR_DISPATCH")
+: > "$REQ_LOG"
+run_hook "admin" "" "$ENV_DISPATCH"
+[[ "$HOOK_RC" -eq 0 ]] || fail "case-7 expected rc=0, got $HOOK_RC"
+[[ -z "$HOOK_STDERR" ]] || fail "case-7 stderr must be empty on release"
+if ingest_lines | grep -qE "^gate-released sessionId=${OP_ID} via=dispatch$"; then
+  pass "case-7 Task(database-operator) after latest user → gate-released via=dispatch"
+else
+  fail "case-7 expected gate-released via=dispatch, got: $(ingest_lines)"
+fi
+
+# ---------------------------------------------------------------------------
+# Case 8: release via skip-sentinel — admin called the skip MCP tool AFTER
+# the latest real-user message.
+# ---------------------------------------------------------------------------
+TR_SKIP=$(mktemp); TMPFILES+=("$TR_SKIP")
+write_transcript "$TR_SKIP" \
+  "user|thanks|" \
+  "assistant|noted|tool_use:mcp__admin__pre-turn-graph-pass-skip" \
+  "assistant|you're welcome|"
+ENV_SKIP=$(envelope_for "$OP_ID" "$TR_SKIP")
+: > "$REQ_LOG"
+run_hook "admin" "" "$ENV_SKIP"
+[[ "$HOOK_RC" -eq 0 ]] || fail "case-8 expected rc=0, got $HOOK_RC"
+[[ -z "$HOOK_STDERR" ]] || fail "case-8 stderr must be empty on release"
+if ingest_lines | grep -qE "^gate-released sessionId=${OP_ID} via=skip-sentinel$"; then
+  pass "case-8 skip-sentinel after latest user → gate-released via=skip-sentinel"
+else
+  fail "case-8 expected gate-released via=skip-sentinel, got: $(ingest_lines)"
+fi
+
+# ---------------------------------------------------------------------------
+# Case 9: per-prompt scoping — a dispatch BEFORE the latest real-user
+# message does NOT release the current turn's gate.
+# ---------------------------------------------------------------------------
+TR_PRIOR=$(mktemp); TMPFILES+=("$TR_PRIOR")
+write_transcript "$TR_PRIOR" \
+  "user|first turn|" \
+  "assistant|dispatching|task:database-operator" \
+  "assistant|done|" \
+  "user|second turn|" \
+  "assistant|hello again|"
+ENV_PRIOR=$(envelope_for "$OP_ID" "$TR_PRIOR")
+: > "$REQ_LOG"
+run_hook "admin" "" "$ENV_PRIOR"
+[[ "$HOOK_RC" -eq 2 ]] || fail "case-9 expected rc=2, got $HOOK_RC"
+if ingest_lines | grep -qE "^gate-blocked sessionId=${OP_ID} reason=sentinel-absent$"; then
+  pass "case-9 dispatch before latest user does NOT release current turn → gate-blocked"
+else
+  fail "case-9 expected gate-blocked, got: $(ingest_lines)"
+fi
+
+# ---------------------------------------------------------------------------
+# Case 10: re-entry — a release tool_use earlier in the same prompt window
+# stays released on a second Stop fire (no loop).
+# ---------------------------------------------------------------------------
+TR_REENTRY=$(mktemp); TMPFILES+=("$TR_REENTRY")
+write_transcript "$TR_REENTRY" \
+  "user|hi|" \
+  "assistant|dispatching|task:database-operator" \
+  "assistant|done|" \
+  "assistant|wrap-up reply|"
+ENV_REENTRY=$(envelope_for "$OP_ID" "$TR_REENTRY")
+: > "$REQ_LOG"
+run_hook "admin" "" "$ENV_REENTRY"
+[[ "$HOOK_RC" -eq 0 ]] || fail "case-10 expected rc=0, got $HOOK_RC"
+if ingest_lines | grep -qE "^gate-released sessionId=${OP_ID} via=dispatch$"; then
+  pass "case-10 second Stop after dispatch still releases (no loop)"
+else
+  fail "case-10 expected gate-released via=dispatch, got: $(ingest_lines)"
+fi
+
+# ---------------------------------------------------------------------------
+echo
+echo "per-turn-graph-pass-gate tests: $PASS passed, $FAIL failed"
+[[ "$FAIL" -eq 0 ]]

package/payload/platform/plugins/admin/hooks/__tests__/pre-turn-graph-pass.test.sh

@@ -26,13 +26,13 @@
 #     "additionalContext":"..."}}` whose additionalContext begins with
 #     `[system: pre-turn-graph-pass-hook]`, names `database-operator` as
 #     the dispatch target, carries a `<prior-writes>` block with the
-#     fetched node, interpolates conversationId from CONVERSATION_NODE_ID,
+#     fetched node, interpolates sessionId from SESSION_NODE_ID,
 #     and carries NO `<conversation>` block (admin has the turn already).
 #     Dispatch log line carries `directive-shape=admin-walks`.
 #   - Prior-writes fetch fails (context endpoint 500): exit 0, dispatch
 #     still fires, `<prior-writes>` block resolves to `(none)`.
-#   - CONVERSATION_NODE_ID unset: exit 0, additionalContext names
-#     `conversationId: <unset>`, and no GET to /api/admin/post-turn-context
+#   - SESSION_NODE_ID unset: exit 0, additionalContext names
+#     `sessionId: <unset>`, and no GET to /api/admin/post-turn-context
 #     is attempted.
 #   - UserPromptSubmit stdin-shape regression: a synthetic UserPromptSubmit
 #     payload produces the documented stdout envelope; a stale Stop-shaped
@@ -125,7 +125,7 @@ PY
 }
 
 run_hook() {
-  # Args: role, specialist, ui_port, conversation_node_id, stdin_json
+  # Args: role, specialist, ui_port, session_node_id, stdin_json
   local role="$1"; local specialist="$2"; local ui_port="$3"
   local conv="$4"; local stdin_json="$5"
   local stderr_file; stderr_file=$(mktemp); TMPFILES+=("$stderr_file")
@@ -137,7 +137,7 @@ run_hook() {
     env_cmd+=("MAXY_UI_INTERNAL_PORT=${ui_port}")
   fi
   if [[ -n "$conv" ]]; then
-    env_cmd+=("CONVERSATION_NODE_ID=${conv}")
+    env_cmd+=("SESSION_NODE_ID=${conv}")
   fi
   env_cmd+=("ACCOUNT_ID=acct-test-0001")
   printf '%s' "$stdin_json" | "${env_cmd[@]}" bash "$HOOK" >"$stdout_file" 2>"$stderr_file"
@@ -328,14 +328,14 @@ fi
 if ! printf '%s' "$CTX_BODY" | grep -q 'database-operator'; then
   fail "case-5 additionalContext must name the database-operator dispatch target"
 fi
-if ! printf '%s' "$CTX_BODY" | grep -q "conversationId: ${CONV_ID}"; then
-  fail "case-5 additionalContext must interpolate conversationId=${CONV_ID}"
+if ! printf '%s' "$CTX_BODY" | grep -q "sessionId: ${CONV_ID}"; then
+  fail "case-5 additionalContext must interpolate sessionId=${CONV_ID}"
 fi
 if ! printf '%s' "$CTX_BODY" | grep -q 'KnowledgeDocument'; then
   fail "case-5 additionalContext <prior-writes> must include fetched labels"
 fi
-if ingest_lines | grep -qE "^dispatch sessionId=${OP_ID} conversationId=${CONV_ID} directive-shape=admin-walks "; then
-  pass "case-5 dispatch path → exit 0 + JSON envelope with prior-writes, conversationId, admin-walks shape"
+if ingest_lines | grep -qE "^dispatch claudeSessionId=${OP_ID} sessionId=${CONV_ID} directive-shape=admin-walks "; then
+  pass "case-5 dispatch path → exit 0 + JSON envelope with prior-writes, sessionId, admin-walks shape"
 else
   fail "case-5 expected dispatch log line with directive-shape=admin-walks, got: $(ingest_lines)"
 fi
@@ -356,7 +356,7 @@ else
 fi
 
 # ---------------------------------------------------------------------------
-# Case 7: CONVERSATION_NODE_ID unset → conversationId:<unset>, no context GET.
+# Case 7: SESSION_NODE_ID unset → sessionId:<unset>, no context GET.
 # ---------------------------------------------------------------------------
 cat > "$CTX_FILE" <<'JSON'
 {"writes":[]}
@@ -365,12 +365,12 @@ JSON
 run_hook "admin" "" "$LISTENER_PORT" "" "$ENV_BASIC"
 [[ "$HOOK_RC" -eq 0 ]] || fail "case-7 expected rc=0, got $HOOK_RC"
 CTX_BODY=$(additional_context)
-if ! printf '%s' "$CTX_BODY" | grep -q 'conversationId: <unset>'; then
-  fail "case-7 additionalContext must contain 'conversationId: <unset>'"
+if ! printf '%s' "$CTX_BODY" | grep -q 'sessionId: <unset>'; then
+  fail "case-7 additionalContext must contain 'sessionId: <unset>'"
 fi
 GET_COUNT=$(context_get_count)
 if [[ "$GET_COUNT" == "0" ]]; then
-  pass "case-7 CONVERSATION_NODE_ID unset → no GET /api/admin/post-turn-context attempted"
+  pass "case-7 SESSION_NODE_ID unset → no GET /api/admin/post-turn-context attempted"
 else
   fail "case-7 expected zero context GETs, got: $GET_COUNT"
 fi

package/payload/platform/plugins/admin/hooks/__tests__/turn-completed-graph-write.test.sh

@@ -194,7 +194,7 @@ fi
 # --- Case 5 (Task 177): ordered-turns happy path -----------------------
 # Transcript with four turns: user-A, asst-A-reply, user-B, asst-B-reply.
 # Envelope `turns` array must carry exactly that order, oldest first.
-# Envelope shape: { turns, conversationId, accountId, occurredAt } — no
+# Envelope shape: { turns, sessionId, accountId, occurredAt } — no
 # top-level operatorMessage / assistantReply.
 ORDERED_TRANSCRIPT=$(mktemp); TMPFILES+=("$ORDERED_TRANSCRIPT")
 {

package/payload/platform/plugins/admin/hooks/archive-ingest-surface-gate.sh

@@ -154,7 +154,7 @@ fi
 case "$TOOL_NAME" in
   mcp__memory__whatsapp-export-parse|mcp__memory__whatsapp-export-insight-write|mcp__memory__whatsapp-export-insight-pass|mcp__memory__whatsapp-export-preview)
     emit_decision "block" "denied-mcp-legacy" \
-      "Blocked: ${TOOL_NAME} is a retired path. generalised conversation-archive ingest — invoke 'bash platform/plugins/memory/bin/conversation-archive-ingest.sh <archive> --source whatsapp --owner-element-id <id> --participant-person-ids <csv> --scope <admin|public>' once. Normalise, sessionize, classify (mode=chat), and memory-ingest (writes :ConversationArchive keyed on conversationIdentity, source=<enum>) all run in-process."
+      "Blocked: ${TOOL_NAME} is a retired path. Invoke the generalised conversation-archive skill — 'bash platform/plugins/memory/bin/conversation-archive-ingest.sh <archive> --source whatsapp --participant-person-ids <csv> --scope <admin|public>' (owner derived from ACCOUNT_ID + USER_ID env). The script normalises, sessionizes, and emits prepared sessions; the dispatched specialist classifies each session in-turn and calls memory-ingest with conversationIdentity set (writes :ConversationArchive)."
     ;;
 esac
 
@@ -186,7 +186,7 @@ if [ "$TOOL_NAME" = "mcp__memory__memory-archive-write" ]; then
   ARCHIVE_TYPE=$(extract_tool_input_field archiveType)
   if [ "$ARCHIVE_TYPE" = "whatsapp-export" ]; then
     emit_decision "block" "denied-mcp-legacy archiveType=whatsapp-export" \
-      "Blocked: memory-archive-write with archiveType='whatsapp-export' is a retired path. routes conversation transcripts through 'bash platform/plugins/memory/bin/conversation-archive-ingest.sh <archive> --source whatsapp --owner-element-id <id> --participant-person-ids <csv> --scope <admin|public>'. Flat-dataset archiveTypes (linkedin-connections, …) flow through memory-archive-write unchanged."
+      "Blocked: memory-archive-write with archiveType='whatsapp-export' is a retired path. Routes conversation transcripts through 'bash platform/plugins/memory/bin/conversation-archive-ingest.sh <archive> --source whatsapp --participant-person-ids <csv> --scope <admin|public>' (owner derived from ACCOUNT_ID + USER_ID env). Flat-dataset archiveTypes (linkedin-connections, …) flow through memory-archive-write unchanged."
   fi
 fi
 

package/payload/platform/plugins/admin/hooks/lib/admin-graph-pass-common.sh

@@ -138,3 +138,105 @@ agp_guard_transcript() {
     exit 0
   fi
 }
+
+# Walks $TRANSCRIPT_PATH and reports, in one line on stdout:
+#   <real-user-present:yes|no>\t<matched-tool-name-or-empty>
+# A "real user" record matches `session-end-retrospective.sh`'s `is_real_user`
+# — `type=user, message.role=user`, content is a string OR a list with at
+# least one non-`tool_result` block. `tool_result`-only user records are tool
+# replies, never turn starts.
+#
+# Every assistant `tool_use` block that appears AFTER the latest real-user
+# record is matched against the alternation passed as `$1` (an extended-regex
+# alternation of literal `tool_use.name` values). The synthetic name
+# `Task:<subagent_type>` is also matched, so callers can release on a
+# `Task` tool_use with `input.subagent_type=<name>` by including
+# `Task:<name>` in the alternation. Returns the first match encountered after
+# the latest real-user record (oldest-first) so the release log carries the
+# matched tool's actual name. Empty match means none of the release patterns
+# appeared since the operator's last turn.
+agp_scan_post_user_toolnames() {
+  local pattern="$1"
+  TRANSCRIPT_PATH="$TRANSCRIPT_PATH" AGP_PATTERN="$pattern" python3 - <<'PY'
+import os, json, re
+
+pattern = re.compile(os.environ["AGP_PATTERN"])
+path = os.environ["TRANSCRIPT_PATH"]
+
+def is_real_user(rec):
+    if not isinstance(rec, dict) or rec.get("type") != "user":
+        return False
+    msg = rec.get("message")
+    if not isinstance(msg, dict) or msg.get("role") != "user":
+        return False
+    content = msg.get("content")
+    if isinstance(content, str):
+        return True
+    if isinstance(content, list):
+        for b in content:
+            if isinstance(b, dict) and b.get("type") != "tool_result":
+                return True
+        return False
+    return True
+
+def assistant_tool_use_names(rec):
+    if not isinstance(rec, dict) or rec.get("type") != "assistant":
+        return []
+    msg = rec.get("message", {}) or {}
+    if msg.get("role") != "assistant":
+        return []
+    content = msg.get("content")
+    if not isinstance(content, list):
+        return []
+    names = []
+    for b in content:
+        if isinstance(b, dict) and b.get("type") == "tool_use":
+            n = b.get("name")
+            if not isinstance(n, str):
+                continue
+            names.append(n)
+            if n == "Task":
+                inp = b.get("input")
+                if isinstance(inp, dict):
+                    st = inp.get("subagent_type")
+                    if isinstance(st, str) and st:
+                        names.append(f"Task:{st}")
+    return names
+
+records = []
+try:
+    with open(path, "r", encoding="utf-8") as f:
+        for raw in f:
+            raw = raw.strip()
+            if not raw:
+                continue
+            try:
+                records.append(json.loads(raw))
+            except Exception:
+                continue
+except Exception:
+    print("no\t")
+    raise SystemExit(0)
+
+latest_user_idx = -1
+for i in range(len(records) - 1, -1, -1):
+    if is_real_user(records[i]):
+        latest_user_idx = i
+        break
+
+if latest_user_idx == -1:
+    print("no\t")
+    raise SystemExit(0)
+
+matched = ""
+for r in records[latest_user_idx + 1:]:
+    for n in assistant_tool_use_names(r):
+        if pattern.fullmatch(n):
+            matched = n
+            break
+    if matched:
+        break
+
+print(f"yes\t{matched}")
+PY
+}