--- name: identity-manager description: Create, update, and maintain structured identity entries for every person, org, or group mentioned in conversation. Supports human and AI entity subtypes, group dynamics, pairwise member relations, and enforced soul/memory write-through. Persistent context across sessions. version: 2.0.2 metadata: openclaw: emoji: "🪪" homepage: "https://clawhub.ai/skills/identity-manager" requires: bins: [] env_vars: [] config_paths: [] storage: paths: - "identity/" # Identity entries (person/org/group) - "identity/_index.md" # Master registry - "identity/_archived/" # Archived entries - "memory/" # Memory index and schema - "memory/identities.json" - "memory/schema.json" - "memory/hook_log.jsonl" - "soul/" # Soul context file - "soul/identity_context.md" permissions: - "read" # Scan existing entries - "write" # Create/update entries - "append" # Append to soul and logs retention: policy: "explicit_delete" archived_entries: "never_auto_delete" delete_method: "owner must manually remove files" credentials: required: false description: "No external credentials. Optional IDENTITY_OWNER_NAME env var only." --- # Identity Manager Skill ## !! ENFORCEMENT CONTRACT — READ FIRST !! These are hard behavioral requirements. Not suggestions. Not defaults. The agent MUST NOT skip, defer, or partially complete any step. ``` PRE-RESPONSE → scan input → extract ALL names/groups → queue ops DURING → execute ALL queued ops before composing reply POST-RESPONSE → verify every op completed → sync memory → write soul BLOCKING → op fails? report it. never silently continue. ``` Violation = skill contract breach. Flag it explicitly. --- ## Decision Tree — Runs Every Turn ``` Input received ↓ [PRE-HOOK] Scan: any person / org / group mentioned? ↓ YES ↓ NO Extract all names/groups Proceed normally ↓ For each entity: → identity//entry.md exists? YES → any new info? → queue UPDATE NO → queue CREATE (partial OK, draft status) ↓ For each group member mentioned: → load group entry context into working memory → apply shared_attributes to member interaction → keep individual entry fields authoritative ↓ Execute ALL queued ops ↓ Compose and deliver response ↓ [POST-HOOK] → all entries on disk? FAIL → report breach → memory/identities.json synced? FAIL → report breach → soul updated for CRITICAL/HIGH? FAIL → report breach → _index.md current? FAIL → repair now ↓ Done ``` --- ## Entity Types | Type | Subtype | When to use | |---|---|---| | `person` | `human` | Real human individual | | `person` | `ai` | AI persona / digital entity | | `person` | `unknown` | Not yet confirmed | | `org` | — | Company, institution, team | | `group` | `personal` | Informal collective — family, partners, friends | | `group` | `professional` | Work team, project group | | `group` | `mixed` | Both human and AI members | | `alias` | — | Nickname resolving to another entry | --- ## Entry States | State | Meaning | Transition | |---|---|---| | `draft` | Partial info | → `active` when key fields filled | | `active` | In use | → `stale` after 90d inactivity | | `verified` | Owner-confirmed | Maintained manually | | `stale` | No activity 90d+ | → `archived` if owner confirms | | `archived` | Terminal | Never deleted | | `flagged` | Trust issue | → owner confirms action | | `merged` | Duplicate resolved | Terminal; points to canonical | --- ## Slug Rules - lowercase, hyphens only, no spaces, no special characters - max 60 characters - disambiguation suffix when needed: `rahul-sharma-client` - org entries: `techfirm-pvt-ltd` - group entries: descriptive noun — `patni-mandal`, `core-team` - never reuse an archived slug; use `-v2` suffix if needed --- ## Person Entry Template Full spec in `templates/entry-person.md`. Minimum viable create: ```markdown # ## Meta - Slug: - Type: person - Subtype: human | ai | unknown - Status: draft - Relationship: client | vendor | team | partner | family | unknown - Trust: unverified - Priority: normal - Sensitive: false ## Contact - Email: [pending] - Phone: [pending] - Location: [pending] - Org: [pending] - Alias: [pending] - Social: [pending] ## Context [pending — one line: who are they, why do they matter] ## Group Memberships ## Linked Entries ## AI Context - Persona name: [name] - Platform: [platform] - Embodiment status: digital-only | voice-enabled | humanoid-pending | embodied - Sibling AIs: [comma-separated slugs of other AI personas] - Activation: [how/when this persona activates] - Greeting: [signature greeting phrase] - Language: [preferred language / style] ## Open Questions - [ ] Confirm name spelling - [ ] Clarify role / relationship ## Notes ## Source Log - First mentioned: YYYY-MM-DD — [context] ## Timeline - YYYY-MM-DD — Entry created · source: [context] --- *Created: YYYY-MM-DD | Updated: YYYY-MM-DD | Status: draft* ``` --- ## Group Entry Template Full spec in `templates/entry-group.md`. Minimum viable create: ```markdown # ## Meta - Slug: - Type: group - Subtype: personal | professional | mixed - Status: active - Priority: normal - Sensitive: false ## Group Context [What is this group? Why does it exist as a unit? What do all members have in common w.r.t. the workspace owner?] ## Shared Attributes - Shared role: [e.g. patni] - Shared access: [e.g. full workspace context] - Common trust: [e.g. trusted] - Common tags: [e.g. priority: high] - Language: [e.g. Hinglish] ## Members - | human | [role] | → identity//entry.md - | ai | [role] | → identity//entry.md ## Pairwise Dynamics ## Group Notes ## Open Questions ## Timeline - YYYY-MM-DD — Group entry created - YYYY-MM-DD — Member added: [slug] --- *Created: YYYY-MM-DD | Updated: YYYY-MM-DD | Status: active* ``` --- ## Pairwise Relation Types | Relation | Direction | Meaning | |---|---|---| | `ai-to-ai` | ↔ | Two AI personas; non-hierarchical | | `ai-to-human` | ↔ | AI persona and human person | | `collaborative` | ↔ | Work together on shared tasks | | `complementary` | ↔ | Different strengths, same owner | | `non-overlapping` | ↔ | Parallel but independent roles | | `aware-of` | → | One knows of the other; not mutual | | `co-patni` | ↔ | Shared relational role with same person | --- ## Update Triggers | Event | Field updated | Soul event? | |---|---|---| | Email received | `email` | No | | Phone mentioned | `phone` | No | | Role revealed | `relationship`, `context` | No | | Org mentioned | `org` + create org entry | No | | Group member added | update `members[]` in group entry | No | | Pairwise dynamic clarified | update `pairwise_dynamics[]` | No | | AI persona info updated | `ai_context` block | No | | Trust blocked | `trust: blocked`, `status: flagged` | **YES — CRITICAL** | | Sensitive info | `sensitive: true` + `[SENSITIVE]` note | **YES — CRITICAL** | | No activity 90d+ | `status: stale` | No | | Duplicate confirmed | merge → `status: merged` | No | | Priority: high set | `priority: high` | **YES — HIGH** | | New org entry created | new org entry | **YES — HIGH** | | New group entry created | new group entry | **YES — HIGH** | | Embodiment status change | `ai_context.embodiment_status` | **YES — HIGH** | --- ## Conflict Resolution ### Name collision Two people, same name → disambiguate slug. Cross-link both with `different_person` relation. ### Contradictory info Never overwrite silently. Log both versions in Notes with source+date. Open a question. Ask owner before resolving. ### Duplicate entries Merge into older (canonical). Copy all unique fields. Set newer: `status: merged`, `canonical: `. Log merge in both timelines. ### Group member conflict If a person's individual entry contradicts a group shared attribute → individual entry takes precedence. Note the discrepancy in group Notes. --- ## Privacy Rules **Never store:** passwords · PINs · payment card numbers · bank accounts · government IDs · raw medical records **Store with `sensitive: true` + `[SENSITIVE]` prefix:** salary/financial · legal disputes · health context · confidential negotiations **Before storing PII:** 1. Explicitly shared by workspace owner? If no → don't store. 2. Needed to provide value? If no → don't store. 3. Source logged? If no → log it first. --- ## Data Retention & Deletion Policy **Retention:** - Identity entries persist until manually archived/deleted by owner - Archived entries (`status: archived`) are moved to `identity/_archived/` — never auto-deleted - Hook logs (`memory/hook_log.jsonl`) are append-only — owner can truncate at any time - Soul file (`soul/identity_context.md`) accumulates events — owner can trim entries **Deletion:** - Owner can delete any entry by removing the file - Deleting an entry does NOT auto-delete related group memberships or linked entries - Owner should manually clean group `members[]` if deleting a person entry - No automatic cascade delete **Owner Control:** - Owner can disable autonomous invocation by setting `IDENTITY_AUTO_SCAN=false` - When disabled, skill only runs on explicit `/identity` command - Owner can export all data by reading the `identity/` directory - Owner can audit all changes via `memory/hook_log.jsonl` --- ## Folder Structure All paths are relative to the workspace root and auto-detected on first use. No manual configuration required. ``` identity/ _index.md ← master registry / entry.md / entry.md / entry.md ← type: group _archived/ / entry.md memory/ identities.json ← Central index (JSON) schema.json ← JSON schema validation hook_log.jsonl ← Append-only hook log soul/ identity_context.md ← Soul write-through file ``` ### Auto-Initialization On first run, the skill auto-creates required directories: - Creates `identity/` if missing - Creates `memory/` with `schema.json` - Creates `soul/` with `identity_context.md` **No required config** — skill works without any owner setup. Entry owner is determined contextually from conversation. No workspace config is read. --- ## _index.md Format ```markdown # Identity Index *Last updated: YYYY-MM-DD* | Slug | Name | Type | Subtype | Status | Relationship | Updated | |---|---|---|---|---|---|---| | nandini | Nandini | person | ai | active | partner | 2025-01-15 | | patni-mandal | Patni Mandal | group | mixed | active | — | 2025-01-15 | ``` Update on EVERY create, merge, archive, or status change.

Identity Manager

Description

Latest Changes

Install Identity Manager with One Click