@rubytech/create-realagent 1.0.828 → 1.0.829

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-realagent",
-  "version": "1.0.828",
+  "version": "1.0.829",
   "description": "Install Real Agent — Built for agents. By agents.",
   "bin": {
     "create-realagent": "./dist/index.js"

package/payload/platform/neo4j/schema.cypher

@@ -269,7 +269,8 @@ OPTIONS {
 //
 // :PARTICIPANT_IN edges from :Person/:AdminUser to :ConversationArchive are
 // MERGEd on every ingest (idempotent); the operator confirms each participant
-// up front via the whatsapp-import skill flow.
+// up front via the document-ingest skill's chat-mode participant flow
+// (Task 894 — supersedes the prior whatsapp-import skill).
 // ----------------------------------------------------------
 
 CREATE CONSTRAINT conversation_archive_identity_unique IF NOT EXISTS

package/payload/platform/package.json

@@ -6,8 +6,8 @@
     "plugins/*/mcp"
   ],
   "scripts": {
-    "build": "tsc -p lib/models/tsconfig.json && tsc -p lib/anthropic-key/tsconfig.json && tsc -p lib/oauth-llm/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/screening-patterns/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p plugins/whatsapp-import/lib/tsconfig.json && NODE_OPTIONS='--max-old-space-size=8192' tsc -b plugins/*/mcp/tsconfig.json",
-    "build:lib": "tsc -p lib/models/tsconfig.json && tsc -p lib/anthropic-key/tsconfig.json && tsc -p lib/oauth-llm/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/screening-patterns/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p plugins/whatsapp-import/lib/tsconfig.json",
+    "build": "tsc -p lib/models/tsconfig.json && tsc -p lib/anthropic-key/tsconfig.json && tsc -p lib/oauth-llm/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/screening-patterns/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && NODE_OPTIONS='--max-old-space-size=8192' tsc -b plugins/*/mcp/tsconfig.json",
+    "build:lib": "tsc -p lib/models/tsconfig.json && tsc -p lib/anthropic-key/tsconfig.json && tsc -p lib/oauth-llm/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/screening-patterns/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json",
     "build:memory": "tsc -p plugins/memory/mcp/tsconfig.json",
     "build:contacts": "tsc -p plugins/contacts/mcp/tsconfig.json",
     "build:telegram": "tsc -p plugins/telegram/mcp/tsconfig.json",

package/payload/platform/plugins/admin/hooks/__tests__/archive-ingest-surface-gate.test.sh

@@ -1,23 +1,30 @@
 #!/usr/bin/env bash
-# Regression test for archive-ingest-surface-gate.sh (Task 855).
+# Regression test for archive-ingest-surface-gate.sh (Task 855, trimmed by Task 894).
 #
-# Covers:
-#   Preserved-from-Task-846:
-#     1. Edit on /platform/plugins/<x>/lib/* → BLOCKED
-#     2. Edit on benign path → ALLOWED
-#     3. Bash with `npx vitest`/`bun test`/`npm test` → BLOCKED
-#     4. PostToolUse on whatsapp-export-parse with isError:true sets flag
-#     5. Subsequent PreToolUse on ANY tool → BLOCKED
-#     6. UserPromptSubmit clears flag → normal allow resumes
-#     7. PostToolUse with isError:false → flag absent
-#     8. Stale flag (>600s) auto-clears
-#   New (Task 855):
-#     A. PreToolUse mcp__memory__whatsapp-export-parse → BLOCKED
-#     B. PreToolUse mcp__memory__whatsapp-export-insight-write → BLOCKED
-#     C. PreToolUse mcp__memory__memory-archive-write w/ archiveType=whatsapp-export → BLOCKED
-#     D. PreToolUse mcp__memory__memory-archive-write w/ archiveType=linkedin-connections → ALLOWED
-#     E. PreToolUse Bash invoking whatsapp-ingest.sh → ALLOWED
-#     F. Default-allow emits a [archive-ingest-gate] decision=allow log line
+# Covers (post-Task-894):
+#   1. Edit on /platform/plugins/<x>/lib/* → BLOCKED
+#   2. Edit on benign path → ALLOWED
+#   3. Bash with `npx vitest`/`bun test`/`npm test` → BLOCKED
+#   4. PreToolUse memory-archive-write w/ archiveType=linkedin-connections → ALLOWED
+#   5. Default-allow emits a [archive-ingest-gate] decision=allow log line
+#   6. Parse-error flag lifecycle: PostToolUse on any *-export-parse / *-import-parse
+#      with isError:true sets flag; subsequent PreToolUse blocks; UserPromptSubmit
+#      clears; stale flag (>600s) auto-clears; parse-success leaves flag absent.
+#   7. Bypass attempts: nested file_path in old_string + top-level file_path in
+#      lib/* → BLOCKED.
+#   8. Fail-closed terminal check.
+#
+# Removed by Task 894:
+#   - WhatsApp-specific MCP-tool blocks (the three legacy whatsapp-export tools
+#     no longer exist; chat archives flow through memory-classify mode='chat'
+#     and memory-ingest parentLabel='ConversationArchive' via document-ingest).
+#   - memory-archive-write archiveType='whatsapp-export' block (the enum value
+#     was dropped from memory-archive-write).
+#
+# A generic LinkedIn-shaped fixture stands in for the parse-error lifecycle —
+# the gate's PostToolUse pattern matches `mcp__*__*-export-parse` /
+# `mcp__*__*-import-parse`, so any plausible parser tool name exercises the
+# flag-set / flag-clear path.
 
 set -u
 
@@ -51,18 +58,20 @@ run_case() {
   fi
 }
 
-# Preserved cases ---------------------------------------------------------
+# Plugin-source-edit block ------------------------------------------------
 
-run_case "Edit on platform/plugins/whatsapp-import/lib/src/parse-export.ts → BLOCKED" \
-  '{"hook_event_name":"PreToolUse","tool_name":"Edit","tool_input":{"file_path":"/Users/x/repo/platform/plugins/whatsapp-import/lib/src/parse-export.ts","old_string":"a","new_string":"b"}}' \
+run_case "Edit on platform/plugins/linkedin-import/lib/src/parse.ts → BLOCKED" \
+  '{"hook_event_name":"PreToolUse","tool_name":"Edit","tool_input":{"file_path":"/Users/x/repo/platform/plugins/linkedin-import/lib/src/parse.ts","old_string":"a","new_string":"b"}}' \
   2
 
 run_case "Edit on README.md → ALLOWED" \
   '{"hook_event_name":"PreToolUse","tool_name":"Edit","tool_input":{"file_path":"/Users/x/repo/README.md","old_string":"a","new_string":"b"}}' \
   0
 
+# Test-runner block (Bash) ------------------------------------------------
+
 run_case "Bash 'npx vitest run' → BLOCKED" \
-  '{"hook_event_name":"PreToolUse","tool_name":"Bash","tool_input":{"command":"npx vitest run parse-export.test.ts"}}' \
+  '{"hook_event_name":"PreToolUse","tool_name":"Bash","tool_input":{"command":"npx vitest run x.test.ts"}}' \
   2
 
 run_case "Bash 'ls -la' → ALLOWED" \
@@ -77,45 +86,18 @@ run_case "Bash 'npm test' → BLOCKED" \
   '{"hook_event_name":"PreToolUse","tool_name":"Bash","tool_input":{"command":"npm test"}}' \
   2
 
-# New (Task 855) cases ----------------------------------------------------
-
-run_case "PreToolUse mcp__memory__whatsapp-export-parse → BLOCKED" \
-  '{"hook_event_name":"PreToolUse","tool_name":"mcp__memory__whatsapp-export-parse","tool_input":{"filePath":"/tmp/_chat.txt","accountId":"acct1","timezone":"Europe/London"}}' \
-  2
-
-run_case "PreToolUse mcp__memory__whatsapp-export-insight-write → BLOCKED" \
-  '{"hook_event_name":"PreToolUse","tool_name":"mcp__memory__whatsapp-export-insight-write","tool_input":{"kind":"MENTIONS","name":"Joel"}}' \
-  2
-
-run_case "PreToolUse memory-archive-write w/ archiveType=whatsapp-export → BLOCKED" \
-  '{"hook_event_name":"PreToolUse","tool_name":"mcp__memory__memory-archive-write","tool_input":{"archiveType":"whatsapp-export","ownerNodeId":"x","accountId":"a","rows":[]}}' \
-  2
+# memory-archive-write — LinkedIn passes through unchanged ----------------
 
 run_case "PreToolUse memory-archive-write w/ archiveType=linkedin-connections → ALLOWED" \
   '{"hook_event_name":"PreToolUse","tool_name":"mcp__memory__memory-archive-write","tool_input":{"archiveType":"linkedin-connections","ownerNodeId":"x","accountId":"a","rows":[]}}' \
   0
 
-# Bypass attempts (Task 855 code-review C1): nested archiveType in rows[0]
-# or conversation must NOT defeat the block. The gate must read the
-# top-level tool_input.archiveType, not the first textual occurrence.
-run_case "BYPASS: nested rows[0].archiveType=linkedin + top-level archiveType=whatsapp-export → BLOCKED" \
-  '{"hook_event_name":"PreToolUse","tool_name":"mcp__memory__memory-archive-write","tool_input":{"rows":[{"archiveType":"linkedin-connections"}],"archiveType":"whatsapp-export","ownerNodeId":"x","accountId":"a"}}' \
-  2
-
-run_case "BYPASS: conversation.archiveType=linkedin + top-level archiveType=whatsapp-export → BLOCKED" \
-  '{"hook_event_name":"PreToolUse","tool_name":"mcp__memory__memory-archive-write","tool_input":{"conversation":{"archiveType":"linkedin-connections","conversationId":"x"},"archiveType":"whatsapp-export","ownerNodeId":"x","accountId":"a","rows":[]}}' \
-  2
-
 # Plugin-source-edit path block must read tool_input.file_path top-level,
 # not a nested file_path in old_string/new_string.
 run_case "BYPASS: nested file_path in old_string + top-level file_path in lib/* → BLOCKED" \
-  '{"hook_event_name":"PreToolUse","tool_name":"Edit","tool_input":{"file_path":"/repo/platform/plugins/whatsapp-import/lib/src/parse-export.ts","old_string":"file_path:/safe/path","new_string":"x"}}' \
+  '{"hook_event_name":"PreToolUse","tool_name":"Edit","tool_input":{"file_path":"/repo/platform/plugins/linkedin-import/lib/src/parse.ts","old_string":"file_path:/safe/path","new_string":"x"}}' \
   2
 
-run_case "PreToolUse Bash invoking whatsapp-ingest.sh → ALLOWED" \
-  '{"hook_event_name":"PreToolUse","tool_name":"Bash","tool_input":{"command":"bash platform/plugins/whatsapp-import/bin/whatsapp-ingest.sh /tmp/chat.zip --owner-element-id 4:abc:1 --subject-person-id 4:abc:2 --scope admin --filter all"}}' \
-  0
-
 # Default-allow log-line check
 LOG=$(printf '%s' '{"hook_event_name":"PreToolUse","tool_name":"Read","tool_input":{"file_path":"/tmp/foo"}}' | bash "$HOOK" 2>&1 1>/dev/null)
 if printf '%s' "$LOG" | grep -q '\[archive-ingest-gate\] decision=allow tool=Read reason=default'; then
@@ -136,10 +118,13 @@ else
   FAIL=$((FAIL + 1))
 fi
 
-# Parse-error flag lifecycle (preserved)
+# Parse-error flag lifecycle (preserved). The gate's PostToolUse pattern is
+# `mcp__*__*-export-parse` / `mcp__*__*-import-parse` — exercise via the
+# linkedin-import-parse name (synthetic — the linkedin importer currently
+# uses memory-archive-write, but the gate matches by tool name shape).
 rm -f "$FLAG_FILE"
 run_case "PostToolUse parse-error sets flag (exit 0)" \
-  '{"hook_event_name":"PostToolUse","tool_name":"mcp__memory__whatsapp-export-parse","tool_input":{"filePath":"_chat.txt"},"tool_response":{"isError":true,"content":[{"type":"text","text":"parse-error file=_chat.txt line=1 reason=not-a-_chat.txt"}]}}' \
+  '{"hook_event_name":"PostToolUse","tool_name":"mcp__memory__linkedin-import-parse","tool_input":{"filePath":"connections.csv"},"tool_response":{"isError":true,"content":[{"type":"text","text":"parse-error file=connections.csv line=1 reason=missing-header"}]}}' \
   0
 [[ -f "$FLAG_FILE" ]] && { echo "PASS: parse-error flag created"; PASS=$((PASS+1)); } \
                       || { echo "FAIL: parse-error flag NOT created" >&2; FAIL=$((FAIL+1)); }
@@ -168,7 +153,7 @@ run_case "Stale flag auto-clears, PreToolUse Read → ALLOWED" \
 # PostToolUse parse-success leaves flag absent
 rm -f "$FLAG_FILE"
 run_case "PostToolUse parse-success (isError:false) does NOT set flag" \
-  '{"hook_event_name":"PostToolUse","tool_name":"mcp__memory__whatsapp-export-parse","tool_input":{"filePath":"_chat.txt"},"tool_response":{"isError":false,"content":[{"type":"text","text":"{\"parsedLines\":[]}"}]}}' \
+  '{"hook_event_name":"PostToolUse","tool_name":"mcp__memory__linkedin-import-parse","tool_input":{"filePath":"connections.csv"},"tool_response":{"isError":false,"content":[{"type":"text","text":"{\"parsedLines\":[]}"}]}}' \
   0
 [[ ! -f "$FLAG_FILE" ]] && { echo "PASS: parse-success leaves flag absent"; PASS=$((PASS+1)); } \
                         || { echo "FAIL: parse-success incorrectly created flag" >&2; FAIL=$((FAIL+1)); }

package/payload/platform/plugins/admin/hooks/archive-ingest-surface-gate.sh

@@ -1,28 +1,24 @@
 #!/usr/bin/env bash
-# Archive-ingest surface gate (Task 855, updated by Task 891).
+# Archive-ingest surface gate (Task 855, updated by Task 891, trimmed by Task 894).
 #
-# Five enforcements, one script — phase decided by `hook_event_name` on stdin.
-# Task 855 narrows the database-operator subagent's effective surface during
-# WhatsApp archive ingestion to exactly one Bash entry
-# (`whatsapp-import/bin/whatsapp-ingest.sh`) plus read-only neighbours, by
-# blocking the legacy MCP deviation tools mechanically. Task 891 retired the
-# `whatsapp-export-insight-pass` tool entirely (Phase 2 enrichment moved to a
-# separate follow-up task that will operate on :Section:Conversation chunks);
-# the tool name is added to the BLOCK list so any agent that still references
-# it from a stale skill or runbook gets a loud denial instead of MCP-not-found.
+# Three enforcements, one script — phase decided by `hook_event_name` on stdin.
+# Task 855 narrowed the database-operator subagent's effective surface during
+# archive ingestion. Task 894 retired the WhatsApp `_chat.txt` deterministic
+# parser and its three legacy MCP tools entirely — chat archives now flow
+# through the unified `document-ingest` pipeline (`memory-classify` mode='chat'
+# + `memory-ingest` parentLabel='ConversationArchive'). The WhatsApp-specific
+# block lists were removed because the tools they referenced no longer exist
+# and the `archiveType=whatsapp-export` enum value was dropped from
+# `memory-archive-write`. The remaining blocks still cover LinkedIn and any
+# future flat-dataset archive types that ship per-source parsers.
 #
-# 1. PreToolUse on the four legacy WhatsApp MCP tools — BLOCK unconditionally.
-#    The single deterministic Bash entry is the only supported path for
-#    `archiveType=whatsapp-export`. Tool source for #1-#3 remains until cleanup;
-#    `whatsapp-export-insight-pass` source was deleted by Task 891 and the
-#    block here catches stale references.
-#       mcp__memory__whatsapp-export-parse
-#       mcp__memory__whatsapp-export-insight-write
-#       mcp__memory__whatsapp-export-insight-pass     (Task 891 — deleted, retired)
-#       mcp__memory__memory-archive-write             (only when `archiveType` is
-#                                                      `whatsapp-export`; LinkedIn
-#                                                      and other archiveTypes pass
-#                                                      through unchanged.)
+# 1. Parse-error gate: PostToolUse on any `mcp__*__*-export-parse` /
+#    `mcp__*__*-import-parse` tool whose `tool_response.isError == true`
+#    writes a flag file. Subsequent PreToolUse on ANY tool blocks until
+#    UserPromptSubmit clears the flag. A 600s TTL is the cross-session safety
+#    net. Preserved from Task 846 because LinkedIn and future per-source archive
+#    parsers still use the legacy MCP path until they migrate to their own
+#    deterministic Bash entries.
 #
 # 2. PreToolUse Edit/Write/NotebookEdit: deny writes under
 #    `*platform/plugins/*/lib/*` (parser/CSV-shape source for any *-import or
@@ -32,18 +28,10 @@
 # 3. PreToolUse Bash: deny commands invoking JavaScript test runners
 #    (vitest|bun test|npm test|npx jest|node .*vitest). Preserved from Task 846.
 #
-# 4. Parse-error gate: PostToolUse on any `mcp__*__*-export-parse` /
-#    `mcp__*__*-import-parse` tool whose `tool_response.isError == true`
-#    writes a flag file. Subsequent PreToolUse on ANY tool blocks until
-#    UserPromptSubmit clears the flag. A 600s TTL is the cross-session safety
-#    net. Preserved from Task 846 because LinkedIn and future per-source archive
-#    parsers still use the legacy MCP path until they migrate to their own
-#    deterministic Bash entries.
-#
-# 5. Logging: every PreToolUse decision emits one line in the format
+# 4. Logging: every PreToolUse decision emits one line in the format
 #       [archive-ingest-gate] decision=<allow|block> tool=<name> reason=<r> ...
 #    so the operator can grep the full decision trail for one ingest from
-#    server.log alongside the [whatsapp-ingest] script lines.
+#    server.log.
 #
 # Exit codes follow Claude Code hook protocol: 0 = allow, 2 = block (stderr
 # message shown to the agent). Fail-closed on terminal stdin to match
@@ -140,21 +128,12 @@ if [ -f "$FLAG_FILE" ]; then
   fi
 fi
 
-# --- Block 2: legacy WhatsApp MCP tools — denied unconditionally ----------
-case "$TOOL_NAME" in
-  mcp__memory__whatsapp-export-parse|mcp__memory__whatsapp-export-insight-write|mcp__memory__whatsapp-export-insight-pass)
-    emit_decision "block" "denied-mcp-legacy" \
-      "Blocked: ${TOOL_NAME} is a retired path. Task 891 ships the chunked-archive contract — invoke 'bash platform/plugins/whatsapp-import/bin/whatsapp-ingest.sh <archive> --owner-element-id <id> --participant-person-ids <csv> --scope <admin|public>' once. Parse, sessionize, classify (mode=chat), and memory-ingest (parentLabel=ConversationArchive) all run in-process; do not call legacy MCP tools. Phase 2 insight derivation is deferred to its own follow-up task."
-    ;;
-esac
-
 # Helper: extract a top-level field from `tool_input` via python3 — never via
 # grep+sed against the raw JSON, which would pick the first textual occurrence
-# including nested-object matches (`rows[0].archiveType`,
-# `conversation.archiveType`, etc.) and let a malicious payload bypass the
-# block. python3 is the project standard for JSON-aware hook parsing
-# (mirrors lane-gate.sh:31-46). On parse failure return empty string —
-# downstream block conditions skip cleanly.
+# including nested-object matches (`rows[0].archiveType`, etc.) and let a
+# malicious payload bypass the block. python3 is the project standard for
+# JSON-aware hook parsing (mirrors lane-gate.sh:31-46). On parse failure
+# return empty string — downstream block conditions skip cleanly.
 extract_tool_input_field() {
   local field="$1"
   printf '%s' "$INPUT" | python3 -c "
@@ -167,18 +146,7 @@ except Exception:
 " 2>/dev/null || echo ""
 }
 
-# --- Block 3: memory-archive-write conditional on whatsapp-export -----------
-# LinkedIn and future archiveTypes flow unchanged through memory-archive-write.
-# Only `archiveType=whatsapp-export` is now restricted to the script path.
-if [ "$TOOL_NAME" = "mcp__memory__memory-archive-write" ]; then
-  ARCHIVE_TYPE=$(extract_tool_input_field archiveType)
-  if [ "$ARCHIVE_TYPE" = "whatsapp-export" ]; then
-    emit_decision "block" "denied-mcp-legacy archiveType=whatsapp-export" \
-      "Blocked: memory-archive-write with archiveType='whatsapp-export' is a retired path. Task 891 ships the chunked-archive contract — invoke 'bash platform/plugins/whatsapp-import/bin/whatsapp-ingest.sh <archive> --owner-element-id <id> --participant-person-ids <csv> --scope <admin|public>' once. Other archiveTypes (linkedin-connections, …) flow through memory-archive-write unchanged."
-  fi
-fi
-
-# --- Block 4: plugin-source path block (Edit/Write/NotebookEdit) -----------
+# --- Block 2: plugin-source path block (Edit/Write/NotebookEdit) -----------
 case "$TOOL_NAME" in
   Edit|Write|NotebookEdit)
     FILE_PATH=$(extract_tool_input_field file_path)
@@ -191,7 +159,7 @@ case "$TOOL_NAME" in
     ;;
 esac
 
-# --- Block 5: shell test-runner block (Bash) -------------------------------
+# --- Block 3: shell test-runner block (Bash) -------------------------------
 COMMAND=""
 if [ "$TOOL_NAME" = "Bash" ]; then
   COMMAND=$(extract_tool_input_field command)

package/payload/platform/plugins/admin/skills/onboarding/SKILL.md

@@ -227,8 +227,8 @@ Invoke the `business-profile` skill, passing the `taskId` so the skill can threa
 
 Personal mode does not register a `LocalBusiness`. The `AdminUser` and personal-profile `Person` nodes were written deterministically at PIN setup time (Task 830 — `writeAdminUserAndPerson`, run as `createdBy.agent === 'system'` and therefore exempt from the action-provenance gate), so this step only enriches the existing Person with operator-identity fields and links it to the `UserProfile`:
 
-1. **Ask the user for their email AND phone number** in one short conversational message — {{productName}} stores both on the personal-profile Person for downstream features (notifications, contact-method matching, identity-coverage signal that the agent uses to detect missing identity in future turns). The user may decline either; record what they provide. (Operator-identity fix: the system-prompt's "Identity coverage" block surfaces missing identity fields on every turn, so a partial answer becomes a follow-up prompt rather than a silent gap.)
-2. **Attach the identity to Person.** Call `profile-update` with `personFields: { email: "<value>", telephone: "<value>" }` (omit either key the user declined). The tool resolves the personal-profile Person via `(au:AdminUser {userId:$you})-[:OWNS]->(p:Person)` server-side and writes the canonical `email`/`telephone` fields. Use canonical `telephone` — `phone` is the schema synonym, not the canonical name; `profile-update` rejects `phone` rather than silently rewriting it. The tool throws if the OWNS edge is missing rather than silently no-oping (the PIN-setup path is the only place that edge is created — a missing edge means PIN setup never ran or was rolled back).
+1. **Elicit Person properties that help {{productName}} serve this operator.** Open by default — identity (email, phone, names), context (where they live, languages they speak, what they do, who they work for), or anything else the operator volunteers that makes future assistance more useful. The personal-profile Person is comprehensive, not enumerated: ask in one short conversational message for what feels natural to volunteer at first contact, accept whatever the operator offers, do not chase a fixed list. The user may decline any field; record what they provide.
+2. **Persist via `profile-update.personFields`.** Pass a single object whose keys are the Person properties the operator volunteered, in the operator's volunteered phrasing — the central schema validator handles synonyms (e.g. `phone` rejects with "use telephone") and Forbidden Properties (e.g. `name` rejects with "use givenName + familyName"); the agent does not pre-rewrite. The tool resolves the personal-profile Person via `(au:AdminUser {userId:$you})-[:OWNS]->(p:Person)` server-side and throws loudly if the OWNS edge is missing rather than silently no-oping (the PIN-setup path is the only place that edge is created — a missing edge means PIN setup never ran or was rolled back).
 3. **Append the step + record the facts.** Call `task-update` with both `appendStep:"identity-attached"` AND `note:"Identity attached — email=<value-or-declined>, telephone=<value-or-declined>"` (use the actual values the operator supplied; for declines write the literal `declined`). One call, both fields. The note carries the operator-meaningful audit content; the step is the phase marker.
 4. **Link the personal-profile `Person` to the `UserProfile`.** Call `memory-search` to resolve the `UserProfile` elementId for the operator (the lazy `loadUserProfile` write created it on the first admin session). Then call `memory-update` on the Person to add the `HAS_PROFILE` edge to the UserProfile. (`HAS_PROFILE` from `:Person` is a sibling pattern to the existing `AdminUser→HAS_PROFILE→UserProfile`; both are valid sources for the same edge type. See [schema-base.md Relationship Patterns](../../../memory/references/schema-base.md).)
 5. **Close the action record.** Call `task-update` with both `appendStep:"profile-linked"` AND `note:"Profile linked — Person=<elementId>, UserProfile=<elementId>"` (the resolved elementIds from steps 2 and 4). Then call `task-complete(taskId)`.

package/payload/platform/plugins/docs/references/plugins-guide.md

@@ -40,7 +40,7 @@ These are enabled during onboarding and can be added or removed at any time. Som
 | `waitlist` | Waitlist lifecycle — extract sign-ups from conversations, review | — |
 | `replicate` | Image generation — three models for photorealistic, design, and fast draft images | Content producer, Research assistant |
 | `linkedin-import` | Import a LinkedIn Basic Data Export — Profile and Connections today, more CSVs as references land | Database operator |
-| `whatsapp-import` | Import a WhatsApp `_chat.txt` export as a chunked `:ConversationArchive` shape (the chunked-archive contract — supersedes the prior two-phase load+enrich contract). Single Bash entry — `bash platform/plugins/whatsapp-import/bin/whatsapp-ingest.sh <archive> --owner-element-id <id> --participant-person-ids <csv> --scope <admin\|public>` — runs parse → operator-confirms owner + every distinct sender → sessionize at gap-hours boundaries (default 12h) → classify each session via Haiku (`memory-classify` with `mode='chat'`) into topic-bounded `:Section:Conversation` chunks → memory-ingest with `parentLabel='ConversationArchive'`. The parent MERGEs on `conversationIdentity = sha256(accountId + ":" + sortedParticipantElementIds)` — stable across re-exports, identical for DM and group. Re-imports are delta-append: prior chunks never touched, only messages after `lastIngestedMessageHash` flow through. Auto-creating participants is forbidden — any parsed senderName outside the operator-confirmed closed set LOUD-FAILs with `parser-miss`. Phase 2 insight derivation (`:Observation` / `:Task` / `:Preference` / `:MENTIONS` against chunks) is deferred to a separate follow-up task. Distinct from the live `whatsapp` plugin which is a Baileys QR-pairing channel. | Database operator |
+| WhatsApp `_chat.txt` archive | (No dedicated plugin.) Chat archives are document-shaped narrative content and route through the unified `document-ingest` skill with `mode='chat'` and `parentLabel='ConversationArchive'`. The skill confirms participants up front (owner + others, no auto-creation), computes `archiveSha256` for cleanup-on-re-ingest discipline, and lets `memory-classify`'s chat prompt produce `:Section:Conversation` chunks bounded by topic transitions. Distinct from the live `whatsapp` plugin (Baileys QR-pairing channel). | Database operator |
 
 ### Claude Official (marketplace)
 

package/payload/platform/plugins/memory/PLUGIN.md

@@ -20,8 +20,6 @@ tools:
   - memory-edit-attachment
   - memory-rename-attachment
   - memory-archive-write
-  - whatsapp-export-parse
-  - whatsapp-export-insight-write
   - conversation-list
   - conversation-search
   - profile-read
@@ -85,9 +83,9 @@ Graph hygiene is **agent-directed, case by case** — no autonomous rule engine,
 
 The owner's profile and preferences accumulate organically from conversation — never from questionnaires. Load the conversational memory skill via `plugin-read` for full guidance on when to observe preferences, how to handle remember/forget requests, and how to answer "what do you know about me?" transparently with confidence scores and evidence trail.
 
-## UserProfile Field Management
+## UserProfile + Person Field Management
 
-`profile-update` serves two purposes: managing Preference nodes (category/key/value) and setting top-level UserProfile node properties via the `profileFields` parameter.
+`profile-update` serves three purposes: managing Preference nodes (category/key/value), setting top-level UserProfile node properties via `profileFields`, and setting Person properties on the operator's personal-profile Person via `personFields`.
 
 Settable UserProfile fields: `timezone` (IANA format, e.g. `Europe/London`), `locale`, `givenName`, `role`, `expertise`. These are account metadata stored directly on the UserProfile node — distinct from Preference nodes, which represent learned behavioural patterns.
 
@@ -98,6 +96,8 @@ Example — setting a user's timezone:
 
 Restricted fields (`accountId`, `embedding`, `profileVersion`) cannot be set via `profileFields`.
 
+**Personal-profile Person via `personFields`.** The personal-profile Person is open by default — the agent decides which Person properties best help it serve this operator (identity, contact, context); the central schema validator enforces synonym + Forbidden Properties rejection (per `references/schema-base.md`). Writes route to the personal-profile Person via the OWNS edge from the AdminUser. Validation runs in `mode: "update"` so the required-property loop is skipped on partial SET (givenName/familyName were established at PIN setup). Pass any Person properties the operator volunteers; the validator surfaces synonym (e.g. `phone`) and forbidden (e.g. `name`) errors with descriptive messages. No allow-list, no enumeration — see the schema-base.md Person row notes for the doctrine.
+
 ## Schema References
 
 Before any structured write, load `references/schema-base.md` via `plugin-read`. This defines property naming rules, required-property groups for documented types, forbidden-property rules, and relationship patterns. If the `LocalBusiness` node has a `businessType` property, also load the matching vertical schema (`references/schema-{businessType}.md`) — it extends the base with vertical-specific types. Confirm which schemas were consulted before writing.