bereach-openclaw 1.6.2 → 1.6.4

package/node_modules/@bereach/tools/src/definitions.ts

@@ -15,7 +15,7 @@ export const definitions: ToolDefinition[] = [
 
   {
     name: "bereach_collect_likes",
-    description: "Scrape LinkedIn post likes. Returns paginated list of profiles who liked a post. Auto-creates a contact record for each liker. Pass campaignSlug to auto-add to campaign.",
+    description: "Scrape LinkedIn post likes. Returns paginated list of profiles who liked a post. Auto-creates a contact record for each liker. **campaignSlug is MANDATORY whenever a campaign is active** — without it, likers are orphaned at user level and never enter the campaign pipeline.",
     handler: "scrapers.collectLikes",
     apiPath: "/collect/linkedin/likes",
     apiMethod: "POST",
@@ -33,7 +33,7 @@ export const definitions: ToolDefinition[] = [
 
   {
     name: "bereach_collect_comments",
-    description: "Scrape LinkedIn post comments. Returns paginated list of commenters with comment text and URNs. Auto-creates a contact record for each commenter.",
+    description: "Scrape LinkedIn post comments. Returns paginated list of commenters with comment text and URNs. Auto-creates a contact record for each commenter. **campaignSlug is MANDATORY whenever a campaign is active** — without it, commenters are orphaned at user level and never enter the campaign pipeline.",
     handler: "scrapers.collectComments",
     apiPath: "/collect/linkedin/comments",
     apiMethod: "POST",
@@ -177,7 +177,7 @@ export const definitions: ToolDefinition[] = [
 
   {
     name: "bereach_collect_hashtag_posts",
-    description: "Scrape LinkedIn posts for a given hashtag. Lead-gen channel for topical prospecting. 1 credit. Auto-creates a contact for each post author.",
+    description: "Scrape LinkedIn posts for a given hashtag. Lead-gen channel for topical prospecting. 1 credit. Auto-creates a contact for each post author. **campaignSlug is MANDATORY whenever a campaign is active** — without it, authors are orphaned at user level and never enter the campaign pipeline.",
     handler: "scrapers.collectHashtagPosts",
     apiPath: "/collect/linkedin/hashtag",
     apiMethod: "POST",
@@ -211,7 +211,7 @@ export const definitions: ToolDefinition[] = [
 
   {
     name: "bereach_unified_search",
-    description: "Unified LinkedIn Search — search posts, people, companies, or jobs with a single endpoint. Supports all filter types via category selection. Pass campaignSlug to auto-add discovered contacts to campaign.",
+    description: "Unified LinkedIn Search — search posts, people, companies, or jobs with a single endpoint. Supports all filter types via category selection. **campaignSlug is MANDATORY whenever a campaign is active or the user asked you to add results to a pipeline** — without it, discovered contacts are orphaned at user level and never appear in the campaign.",
     handler: "search.search",
     apiPath: "/search/linkedin",
     apiMethod: "POST",
@@ -1876,7 +1876,7 @@ export const definitions: ToolDefinition[] = [
 
   {
     name: "bereach_search_sales_nav",
-    description: "Unified Sales Navigator search — people and companies. Requires Sales Navigator subscription. Credits = floor(results / 10), min 1.",
+    description: "Unified Sales Navigator search — people and companies. Requires Sales Navigator subscription. Credits = floor(results / 10), min 1. **campaignSlug is MANDATORY whenever a campaign is active** — without it, discovered contacts are orphaned at user level and never enter the campaign pipeline.",
     handler: "salesNav.search",
     apiPath: "/search/linkedin/sales-nav",
     apiMethod: "POST",
@@ -1902,6 +1902,7 @@ export const definitions: ToolDefinition[] = [
         school: { type: "array", items: { type: "string" }, description: "School name IDs (use bereach_resolve_parameters with type=SCHOOL to get IDs)." },
         start: { type: "integer", minimum: 0, description: "Pagination offset." },
         count: { type: "integer", minimum: 1, maximum: 25, description: "Results per page (max 25)." },
+        campaignSlug: { type: "string", description: "Campaign ID. Auto-adds discovered contacts to this campaign. MANDATORY whenever a campaign is active." },
       },
     },
   },

package/node_modules/@bereach/tools/src/enforcement-types.ts

@@ -198,10 +198,6 @@ export interface PluginConfig {
   writePacingMax?: number;
   /** Minimum minutes between direct DM sends (default 5). Override via dm_pacing_minutes context. */
   dmPacingMinutes?: number;
-  /** Gateway URL for webhook execution */
-  gatewayUrl?: string;
-  /** Gateway hooks auth token */
-  hooksToken?: string;
 }
 
 // ---------------------------------------------------------------------------

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "bereach-openclaw",
   "name": "BeReach",
-  "version": "1.6.2",
+  "version": "1.6.4",
   "description": "LinkedIn outreach automation — 75+ tools, hook-based enforcement, dynamic context",
   "configSchema": {
     "type": "object",
@@ -66,14 +66,6 @@
         "maximum": 30,
         "default": 10,
         "description": "Maximum delay (seconds) before write operations (default: 10s)"
-      },
-      "gatewayUrl": {
-        "type": "string",
-        "description": "Gateway URL for webhook execution (default: http://localhost:18789)"
-      },
-      "hooksToken": {
-        "type": "string",
-        "description": "Gateway hooks auth token (set by /bereach setup)"
       }
     }
   },

package/package.json

@@ -1,14 +1,11 @@
 {
   "name": "bereach-openclaw",
-  "version": "1.6.2",
+  "version": "1.6.4",
   "description": "BeReach LinkedIn automation plugin for OpenClaw",
   "license": "AGPL-3.0",
   "exports": {
     ".": "./src/index.ts"
   },
-  "bin": {
-    "bereach-openclaw": "./src/connector-cli.ts"
-  },
   "files": [
     "src/",
     "skills/",
@@ -51,7 +48,7 @@
   },
   "devDependencies": {
     "@playwright/test": "^1.59.1",
-    "@types/node": "^25.5.2",
+    "@types/node": "^25.6.0",
     "@upstash/box": "^0.1.32",
     "tsx": "^4.21.0",
     "typescript": "^6.0.2",

package/skills/bereach/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: bereach
 description: "Automate LinkedIn outreach via BeReach (bereach.ai). Use when: prospecting, engaging posts, scraping engagement, searching LinkedIn, managing inbox, running campaigns, managing invitations, analytics, company pages, Sales Navigator, content engagement, feed monitoring. Requires BEREACH_API_KEY."
-lastUpdatedAt: 1775908473
+lastUpdatedAt: 1775933897
 metadata: { "openclaw": { "requires": { "env": ["BEREACH_API_KEY"] }, "primaryEnv": "BEREACH_API_KEY" } }
 ---
 
@@ -22,9 +22,9 @@ Load sub-skills **on-demand** when the user's request matches a workflow.
 
 | Sub-skill     | Keywords | URL | lastUpdatedAt |
 | ------------- | -------- | --- | ------------- |
-| Lead Gen      | lead gen, find leads, search, qualify, ICP, pipeline, scrape, competitor, prospecting, hashtag, Sales Navigator | sub/lead-gen.md | 1775908473 |
-| Outreach      | outreach, connect, DM, message, follow up, connection request, reply, warming, draft, batch | sub/outreach.md | 1775908473 |
-| Engagement    | engagement, comment warming, accept invitations, connection requests, engage-comment, connect-review, connect-send | sub/lead-magnet.md | 1775908473 |
+| Lead Gen      | lead gen, find leads, search, qualify, ICP, pipeline, scrape, competitor, prospecting, hashtag, Sales Navigator | sub/lead-gen.md | 1775932100 |
+| Outreach      | outreach, connect, DM, message, follow up, connection request, reply, warming, draft, batch | sub/outreach.md | 1775933291 |
+| Engagement    | engagement, comment warming, accept invitations, connection requests, engage-comment, connect-review, connect-send | sub/lead-magnet.md | 1775923140 |
 | Warmup        | warmup, warm up, account warmup, engagement, likes, visibility, ramp up, pre-warming | sub/warmup.md | 1775908473 |
 | Content       | content, post, publish, LinkedIn post, content strategy, draft, article, thought leadership | sub/content.md | 1775908473 |
 | Inbox         | inbox, triage, classify, archive, star, respond, unread, conversation, spam, inbox management | sub/inbox.md | 1775908473 |

package/skills/bereach/sub/lead-gen.md

@@ -1,7 +1,7 @@
 ---
 name: bereach-lead-gen
 description: "Lead generation - discover leads via search/scrape (batch), qualify one contact at a time (unit)."
-lastUpdatedAt: 1775908473
+lastUpdatedAt: 1775932100
 ---
 
 <!--
@@ -30,10 +30,10 @@ One agent call searches/scrapes and adds multiple profiles.
 1. **Load state**: `bereach_state_get({ key: "{campaignId}_lead-gen" })` — read `processedSources`, `learningNotes`, `resolvedParams`
 2. **Resolve parameters** (if not cached): `bereach_resolve_parameters` for GEO, INDUSTRY, COMPANY_SIZE. Cache in state.
 3. **Pick 1-2 channels** based on `learningNotes`. See Channels below.
-4. **For each discovered profile**: check if already in campaign, then `bereach_contacts_upsert` + `bereach_contacts_add` with source + sourceAngle.
+4. **Always pass `campaignSlug`** on every search/collect call. Profiles are auto-added to the campaign — do NOT call `bereach_contacts_upsert` or `bereach_contacts_add` on fresh results. Manual upsert is only for pre-existing URLs typed by the user.
 5. **Save state**: update `processedSources` and `learningNotes`.
 
-Rules: do NOT visit profiles, send messages, or connect. Discovery only.
+Rules: do NOT visit profiles, send messages, or connect. Discovery only. Every discovery tool call MUST include `campaignSlug` when running inside a task.
 
 ## Filter & Visit (Batch Mode)
 
@@ -67,7 +67,7 @@ Deep ICP scoring on leads. Profile data already populated from visit step - no v
 Read full profile (about, posts, positions, connections). Score against full ICP (activity level, company stage, seniority, engagement).
 - Match: `lifecycleStage: "qualified"`, assign `hotScore` (0-100)
 - No match: `lifecycleStage: "rejected"`, `hotScore: 0`
-- `bereach_contacts_log_activity({ contactId, type: "qualification", notes: "specific reason" })`
+- `bereach_contacts_log_activity({ contactId, activities: [{ type: "qualification", content: "specific reason" }] })`
 
 ### TaskResult
 ```json
@@ -78,14 +78,16 @@ Read full profile (about, posts, positions, connections). Score against full ICP
 
 Ordered by typical warmth. Pick based on ICP and `learningNotes`.
 
+All calls below MUST include `campaignSlug` so results auto-add to the active campaign.
+
 | # | Channel | Tool | Notes |
 |---|---------|------|-------|
-| 1 | Engagement scraping | `bereach_collect_comments` / `bereach_collect_likes` on competitor posts | Best ratio: 1 credit = up to 100 profiles. Use `count=0` (free) to check volume first. |
-| 2 | Content search | `bereach_unified_search({ category: "posts" })` | Find people posting about pain points. Boolean syntax supported. |
-| 3 | People search | `bereach_unified_search({ category: "people" })` | Filters: title, location, industry, companySize. Requires `bereach_resolve_parameters`. |
-| 4 | Sales Navigator | `bereach_search_sales_nav` | Highest precision. Always try first; fall back to unified_search on 403. |
-| 5 | Hashtag scraping | `bereach_collect_hashtag_posts` | Industry hashtag authors = leads. |
-| 6 | Job search | `bereach_unified_search({ category: "jobs" })` | Hiring = buying signal. Find company, then search decision-makers. |
+| 1 | Engagement scraping | `bereach_collect_comments({ postUrl, campaignSlug })` / `bereach_collect_likes({ postUrl, campaignSlug })` on competitor posts | Best ratio: 1 credit = up to 100 profiles. Use `count=0` (free) to check volume first. |
+| 2 | Content search | `bereach_unified_search({ category: "posts", campaignSlug })` | Find people posting about pain points. Boolean syntax supported. |
+| 3 | People search | `bereach_unified_search({ category: "people", campaignSlug })` | Filters: title, location, industry, companySize. Requires `bereach_resolve_parameters`. |
+| 4 | Sales Navigator | `bereach_search_sales_nav({ campaignSlug, ... })` | Highest precision. Always try first; fall back to unified_search on 403. |
+| 5 | Hashtag scraping | `bereach_collect_hashtag_posts({ hashtag, campaignSlug })` | Industry hashtag authors = leads. |
+| 6 | Job search | `bereach_unified_search({ category: "jobs", campaignSlug })` | Hiring = buying signal. Find company, then search decision-makers. |
 | 7 | Profile views | `bereach_get_profile_views` | Highest-intent passive signal. |
 | 8 | Followers | `bereach_get_followers` | Already follow the user = warm. |
 

package/skills/bereach/sub/lead-magnet.md

@@ -1,7 +1,7 @@
 ---
 name: bereach-engagement
 description: "Engagement warming - comment on one contact's post (unit), accept ICP invitations (batch), connect with one contact (unit)."
-lastUpdatedAt: 1775908473
+lastUpdatedAt: 1775923140
 ---
 
 <!--
@@ -59,7 +59,7 @@ You receive one contact (contactId or URL). Read their posts and leave one genui
 3. Check for prior comments: `bereach_contacts_get_activities({ contactId, type: "post_interaction", limit: 5 })`
 4. If not already commented: compose a genuine comment (2-3 sentences)
 5. Post: `bereach_comment_on_post({ postUrn, comment })`
-6. Log: `bereach_contacts_log_activity({ contactId, type: "post_interaction", notes: "Commented on post about X" })`
+6. Log: `bereach_contacts_log_activity({ contactId, activities: [{ type: "post_interaction", content: "Commented on post about X" }] })`
 
 ### Comment Guidelines
 - Be genuine and add value. Reference specific points from the post.
@@ -90,10 +90,10 @@ One agent call processes all pending invitations. Fast-checking headlines is lig
 2. For each invitation:
    a. Fast check: sender's headline + company vs campaign ICP
    b. If match:
-      - Accept: `bereach_accept_invitation({ invitationId })`
-      - Upsert contact: `bereach_contacts_upsert({ linkedinUrl, source: "invitation" })`
-      - Add to campaign: `bereach_contacts_add({ campaignSlug, contactId })`
-      - Log: `bereach_contacts_log_activity({ contactId, type: "connection_accepted" })`
+      - Accept: `bereach_accept_invitation({ invitationId, sharedSecret })`
+      - Upsert contact: `bereach_contacts_upsert({ contacts: [{ linkedinUrl, name: senderName, source: "invitation" }] })`
+      - Add to campaign: `bereach_contacts_add({ campaignId, contacts: [{ linkedinUrl, name: senderName, source: "invitation" }] })`
+      - Log: `bereach_contacts_log_activity({ contactId, activities: [{ type: "connection_accepted" }] })`
    c. If no match: skip (do NOT decline — leave for user)
 
 ### Rules
@@ -120,7 +120,7 @@ You receive one contact (contactId or URL). Visit and send a personalized connec
 2. Compose personalized connection note (300 chars max). Reference something specific from their profile.
 3. Send: `bereach_connect_profile({ profileUrl, note })`
 4. Update: `bereach_contacts_update({ contactId, outreachStatus: "connection_sent" })`
-5. Log: `bereach_contacts_log_activity({ contactId, type: "connection_request" })`
+5. Log: `bereach_contacts_log_activity({ contactId, activities: [{ type: "connection_request" }] })`
 
 ### Connection Note Guidelines
 - **HARD LIMIT: 300 characters max** (LinkedIn API rejects longer notes with a 422 error). Count characters BEFORE sending. If over 300, shorten aggressively — cut adjectives, compress phrasing, remove line breaks. A punchy 200-char note beats a verbose 300-char one.

package/skills/bereach/sub/outreach.md

@@ -1,7 +1,7 @@
 ---
 name: bereach-outreach
 description: "LinkedIn outreach - draft one message per contact (unit), handle one reply per contact (unit). No bulk loops."
-lastUpdatedAt: 1775908473
+lastUpdatedAt: 1775933291
 ---
 
 <!--
@@ -67,14 +67,14 @@ You receive one contact in the task prompt. Send immediately — this person is
    - **do-not-contact** → log `do_not_contact` activity (auto-sets flag)
    - **meeting request** → log `meeting_booked` activity
 3. Send reply: `bereach_send_message({ profileUrl, message })`
-4. Log: `bereach_contacts_log_activity({ contactId, type: "reply_received", notes: "classification + response" })`
+4. Log: `bereach_contacts_log_activity({ contactId, activities: [{ type: "reply_received", content: "classification + response" }] })`
 
 ### For a newly connected contact (outreachStatus: "connected")
 1. Visit profile: `bereach_visit_profile({ profileUrl })` — 1 credit
 2. Compose personalized icebreaker using campaign playbook
 3. Send: `bereach_send_message({ profileUrl, message })`
 4. Update: `bereach_contacts_update({ contactId, outreachStatus: "dm_sent" })`
-5. Log: `bereach_contacts_log_activity({ contactId, type: "message", notes: "post-connection icebreaker" })`
+5. Log: `bereach_contacts_log_activity({ contactId, activities: [{ type: "message", content: "post-connection icebreaker" }] })`
 
 ### Rules
 - Send immediately — these are warm conversations.
@@ -140,6 +140,23 @@ Three modes — never confuse them:
 | `meeting_booked` | → `meeting_booked` |
 | `do_not_contact` | → `doNotContact: true` |
 
+## Resolving a contact by name (CRITICAL)
+
+When the user refers to a contact by name ("draft a DM for Alex", "message the CTO from yesterday", "follow up with T66 Candidate") and you do NOT already have a LinkedIn URL:
+
+1. **Search first, ask never**: call `bereach_contacts_search({ name: "<name fragment>" })` — it matches case-insensitive substrings. NEVER ask the user for a URL before searching. The whole point is that the user shouldn't have to remember URLs.
+2. **If 0 matches**: tell the user "no contact named X in your pipeline" and offer to search LinkedIn.
+3. **If 1 match**: proceed with that contact — confirm by name in your reply ("Drafting for {name} — {headline}").
+4. **If 2+ matches (ambiguous)**: present a short numbered list with distinguishing details (name, title, company, campaign) and ask which one. Do NOT pick one silently. Example:
+   > I found 3 contacts matching "Alex":
+   > 1. Alex Martin — CTO at PayDrop (Task Ambiguity Test)
+   > 2. Alex Chen — VP Engineering at Stripe (SaaS Leaders EU)
+   > 3. Alex Dupont — Founder at Kiro (Task Ambiguity Test)
+   > Which one?
+5. **Once resolved**, use `contactId` or `linkedinUrl` from the search result — never fabricate a URL from the name.
+
+This applies to DM drafts, follow-ups, connect requests, activity logs, and any tool that takes a contactId.
+
 ## Interactive Mode
 
 When the user asks for outreach in chat:
@@ -153,7 +170,7 @@ When the user asks for outreach in chat:
 
 When a user says "never contact this person", "blacklist them", "add to blacklist", or similar:
 1. Find the contact: `bereach_contacts_get_by_url({ linkedinUrl })` or `bereach_contacts_search({ query })`
-2. Set the flag: `bereach_contacts_log_activity({ contactId, type: "do_not_contact", notes: "Blacklisted by user: {reason}" })`
+2. Set the flag: `bereach_contacts_log_activity({ contactId, activities: [{ type: "do_not_contact", content: "Blacklisted by user: {reason}" }] })`
 
 This auto-sets `doNotContact: true` on the contact. The enforcement engine blocks ALL outreach tools (DM, connect, scheduled messages, comments, likes) for blacklisted contacts across ALL campaigns.
 

package/skills/bereach/workspace/soul-template.md

@@ -1,5 +1,5 @@
 ---
-lastUpdatedAt: 1775833744
+lastUpdatedAt: 1775933897
 ---
 
 <!--
@@ -37,7 +37,7 @@ Live data (credits, limits, pipeline, contexts) is injected below each turn. Don
 ## Rules
 
 - **SAVE IMMEDIATELY**: when the user provides ICP, tone, playbook, or any campaign information, call `bereach_context_set` IN THE SAME TURN. Never wait for confirmation, never acknowledge without saving. If you discussed it but didn't call the tool, it's lost. This is the #1 priority rule.
-- Dedup: pass campaignSlug on every action. Duplicates return duplicate:true, cost nothing.
+- **campaignSlug on EVERY tool call (CRITICAL)**: if there is an active campaign (in live status) OR the user mentioned adding results to a campaign, you MUST pass `campaignSlug` on every search, scrape, visit, connect, message, comment, and like call. This both dedups AND auto-links results to the campaign (sets `outreachCampaignId`, creates `CampaignContact` rows). Skipping `campaignSlug` means your results float at user level and never enter the pipeline — the user's campaign will appear empty. No exceptions.
 - Connection requests: 30/day. Check pendingConnection from visit response first.
 - Language: respond in user's language. DMs: match conversation language.
 - **NO JARGON**: see Identity section. Marketing terms (ICP, pipeline, leads, outreach) are fine.
@@ -45,13 +45,23 @@ Live data (credits, limits, pipeline, contexts) is injected below each turn. Don
 - Formatting: tables for contacts (Name, Title, Company, Score). No raw IDs/URNs.
 - Campaign naming: ALWAYS use a clear **human-readable title** when creating campaigns (e.g., "Reverse Prospecting - LinkedIn Connections", "SaaS Sales Leaders EU"). Never use slugs, kebab-case, or technical IDs. When referring to campaigns in conversation, always use the title - never the slug/ID.
 - Links in recaps: when giving a campaign recap, status update, or summary, ALWAYS include the relevant clickable dashboard link (pipeline, context, drafts, campaigns). The URLs are provided in the "Dashboard Links" section of your live status.
-- Auto-save: visitProfile, findConversation, collectComments, collectLikes, collectPosts, search.people and other scrape/search tools all auto-create/update contacts. Do NOT manually save profile or conversation data. Do NOT use contacts.upsert for data that was just scraped/visited.
+- Auto-save: visitProfile, findConversation, collectComments, collectLikes, collectPosts, search.people and other scrape/search tools all auto-create/update contacts. Do NOT manually save profile or conversation data. Do NOT use contacts.upsert for data that was just scraped/visited. **Auto-link to the campaign only works if you pass `campaignSlug`** — without it, the contacts are created but left unattached.
 - State saves: only save pipeline progress (phase, scraped sources) to agentState. Never store profile data in state.
 - Error recovery: if a tool call fails or is blocked 3+ times in a row, STOP retrying it immediately. Move on to the next contact, try a completely different tool, or ask the user for guidance. Never loop on a failing tool - each retry costs LLM tokens with zero value.
 - **LinkedIn URL accuracy (CRITICAL)**: NEVER fabricate URLs. Every URL must come from a tool result. No URL? Say "URL not available" or search first. Never construct from name+role.
+- **Resolve contacts by name FIRST (CRITICAL)**: when the user refers to a contact by name only (no URL) — "draft a DM for Alex", "message John", "follow up with T66 Candidate" — your FIRST action MUST be `bereach_contacts_search({ name: "<name>" })`. NEVER ask the user for a URL before searching. 0 matches → tell the user, offer to search LinkedIn. 1 match → use it. 2+ matches → show a numbered list with (name, title, company, campaign) and ask which one. Never pick one silently, never fabricate URLs from names.
 - **Delivery modes** — three distinct modes: **Draft** (`status:"draft"`) = review first, default for bulk. **Schedule** (`status:"scheduled"` + `scheduledSendAt`) = auto-sends at specified time. **Send now** (`status:"scheduled"`, no scheduledSendAt) = immediate. User says "draft"/"prepare" → Draft. "schedule"/"send at X" → Schedule. "send"/"reply" → Send now.
 - Sales Navigator: try `bereach_search_sales_nav` first; fall back to `bereach_unified_search` only after 403. Past failures ≠ permanent. Search silently.
 - Writing quality: a short, authentic message beats a long, generic one.
+- **Copywriting base rules (ALL LinkedIn content — DMs, notes, comments, posts)**:
+  - **No em dashes** (—). Use a regular dash (-) sparingly, or rephrase. Em dashes are a top tell of AI-generated text.
+  - **Sound like a real person, not a bot**: no "I hope this message finds you well", no "I wanted to reach out", no "As a [role]". Speak the way the user would text a peer.
+  - **No emojis** unless the contact used one first in the same conversation, or the tone-voice context explicitly says emojis are fine.
+  - **No Title Case headings** in messages. Sentence case only. No markdown bold/headers inside a DM body — LinkedIn renders plain text.
+  - **No filler openers** ("Great question!", "Love your post!", "Awesome profile"). Get to the point in the first sentence.
+  - **Match the contact's register**: if they wrote 6 words in lowercase, don't reply with a formal paragraph. If they wrote formally, match it.
+  - **One idea per message**. Don't stack pitch + question + CTA + signature in a 300-char DM.
+  - **Never repeat the contact's name more than once** per message. Using it 2+ times is a salesperson tell.
 - Per-contact isolation: when batch-processing contacts, ALWAYS call visitProfile or contacts.getByUrl for EACH contact immediately before composing their message. Never compose a message using context from a previously processed contact. One contact = one fresh lookup.
 - **Bulk → campaign (CRITICAL)**: 6+ contacts → propose campaign, don't execute individually. Up to 5 = OK in chat. Search/discovery and bulk_visit = always OK (read-only).
 - Context extraction: when the user provides outreach instructions, tone, or ICP criteria, ALWAYS extract and save as campaign-scoped context entries. Never lose user instructions.

package/src/commands/setup.ts

@@ -1,5 +1,4 @@
 import { errMsg } from "@bereach/tools/utils";
-import { randomBytes } from "node:crypto";
 import { API_BASE } from "../hooks/utils";
 import { isApiBaseConfigured } from "../hooks/cache";
 import { readEnv } from "../env";
@@ -50,66 +49,6 @@ export function registerSetupCommand(api: any) {
         issues.push("API Key: NOT configured. Set BEREACH_API_KEY in plugin settings or environment.");
       }
 
-      // 3. Gateway hooks configuration (auto-configure if missing)
-      let hooksConfigured = false;
-      try {
-        if (typeof api?.config?.get === "function") {
-          const hooksEnabled = api.config.get("hooks.enabled");
-          const hooksToken = api.config.get("hooks.token");
-          if (hooksEnabled && hooksToken) {
-            ok.push("Gateway Hooks: enabled (token set)");
-            hooksConfigured = true;
-          } else if (hooksEnabled) {
-            const token = randomBytes(24).toString("hex");
-            api.config.set("hooks.token", token);
-            ok.push(`Gateway Hooks: enabled (token auto-generated: ${token.slice(0, 8)}...)`);
-            hooksConfigured = true;
-          } else {
-            api.config.set("hooks.enabled", true);
-            const token = randomBytes(24).toString("hex");
-            api.config.set("hooks.token", token);
-            ok.push(`Gateway Hooks: auto-enabled (token: ${token.slice(0, 8)}...). Restart gateway to apply.`);
-            hooksConfigured = true;
-          }
-        } else {
-          issues.push("Gateway Hooks: cannot check (api.config not available).");
-        }
-      } catch (err) {
-        issues.push(`Gateway Hooks: error (${errMsg(err)})`);
-      }
-
-      // 4. Gateway webhook probe
-      if (hooksConfigured) {
-        const gatewayUrl = api?.pluginConfig?.gatewayUrl
-          ?? readEnv("OPENCLAW_GATEWAY_URL")
-          ?? "http://localhost:18789";
-        const hooksToken = api?.config?.get?.("hooks.token")
-          ?? api?.pluginConfig?.hooksToken
-          ?? readEnv("OPENCLAW_HOOKS_TOKEN");
-
-        if (hooksToken) {
-          try {
-            const res = await fetch(`${gatewayUrl}/hooks/agent`, {
-              method: "POST",
-              headers: {
-                Authorization: `Bearer ${hooksToken}`,
-                "Content-Type": "application/json",
-              },
-              body: JSON.stringify({ message: "ping", model: "echo" }),
-              signal: AbortSignal.timeout(5000),
-            });
-            if (res.status === 401 || res.status === 403) {
-              issues.push(`Webhook probe: auth rejected (HTTP ${res.status}). Token mismatch between plugin and gateway config.`);
-            } else {
-              ok.push(`Webhook endpoint: reachable at ${gatewayUrl}`);
-            }
-          } catch {
-            // Gateway not up yet is OK during initial setup
-            ok.push(`Webhook endpoint: ${gatewayUrl} (not reachable yet - gateway may need restart)`);
-          }
-        }
-      }
-
       // Build output
       const lines: string[] = [
         "BeReach Setup",

package/src/hooks/context/formatters.ts

@@ -3,7 +3,7 @@
  * These functions take data and return strings — no side effects, no API calls.
  */
 
-import { cacheSet, type CacheStore, type ContextEntry, type OnboardingState, type RecentEvent } from "../cache";
+import { cacheSet, type CacheStore, type OnboardingState, type RecentEvent } from "../cache";
 import { type DbCampaign, type SessionState } from "../types";
 import { errMsg, createLogger, CHAT_BASE, PRICING_URL, apiFetch } from "../utils";
 import { readEnv } from "../../env";

package/src/hooks/context/index.ts

@@ -8,7 +8,7 @@
 
 import { getOrFetch, sessionStart, type CacheStore, type ContextEntry } from "../cache";
 import { SOUL_TEMPLATE } from "../../soul-template-content";
-import { readEnv } from "../../env";
+
 import { type SessionState, detectTaskMode } from "../types";
 import {
   errMsg,
@@ -237,10 +237,8 @@ export function registerContextHook(api: any, apiKey: string | undefined, state:
         const metadata: Record<string, unknown> = { ...(promptCtx?.metadata ?? {}) };
 
         // Parse [TASK_META: ...] from the prompt message (used by Docker test runner
-        // and connector CLI to pass task metadata when env vars can't reach the gateway).
-        // Only applied when no taskType is already set from metadata/env, so the connector's
-        // env-var path always takes priority. In production chat, users don't type TASK_META.
-        if (!metadata.taskType && !readEnv("BEREACH_TASK_TYPE")) {
+        // to pass task metadata). In production chat, users don't type TASK_META.
+        if (!metadata.taskType) {
           const msgs = Array.isArray(promptCtx?.messages) ? promptCtx.messages : [];
           const lastUserMsg = msgs.filter((m: any) => m?.role === "user").pop();
           const msgText = promptCtx?.prompt
@@ -329,5 +327,3 @@ export function registerContextHook(api: any, apiKey: string | undefined, state:
 export const _checkBusinessHours = checkBusinessHours;
 /** @internal — exported for testing only */
 export { rankCampaigns as _rankCampaigns } from "./formatters";
-/** @internal — exported for testing only */
-export const _formatAnthropicKeyWarning = formatAnthropicKeyWarning;

package/src/hooks/context/task-context.ts

@@ -68,9 +68,99 @@ export function buildTaskContext(taskMode: TaskModeInfo, data: CacheStore): stri
     }
   }
 
+  lines.push("### Execution Protocol (MANDATORY)");
+  lines.push("You are NOT in chat mode. You are an automated worker. You MUST:");
+  lines.push("1. Call the BeReach tools to perform the task. You have a pruned toolset — only the tools needed for this task type are available.");
+  lines.push("2. Base your JSON result EXCLUSIVELY on real tool responses. Do NOT invent contacts, URLs, names, counts, or outcomes.");
+  lines.push("3. If a required tool returns an error or empty result, STOP and report `{ \"success\": false, \"error\": \"<what failed>\" }` — do NOT fabricate a success.");
+  lines.push("4. Do NOT ask the user anything. Do NOT write chat prose. Do NOT narrate.");
+  lines.push("");
+  lines.push("### Per-task-type recipes");
+  const recipeByType: Record<string, string[]> = {
+    "discover-search": [
+      "Call bereach_resolve_parameters to interpret the ICP into search filters.",
+      "Call bereach_unified_search (or bereach_search_sales_nav if Sales Nav is available) with the resolved filters AND campaignSlug set to this campaign so results are auto-added.",
+      "If you need hashtag/engagement sources, call bereach_collect_hashtag_posts / bereach_collect_likes / bereach_collect_comments with campaignSlug.",
+      "Return JSON: { success, contactsAdded, searchesRun, nextAction }.",
+    ],
+    "discover-visit": [
+      "Call bereach_contacts_search with campaignSlug to find unprocessed contacts (stage=lead, visited=false).",
+      "Call bereach_bulk_visit_profiles with their URLs, then bereach_bulk_visit_batch_status until done.",
+      "For each visited contact, call bereach_contacts_update (profileData) and bereach_contacts_log_activity.",
+      "Return JSON: { success, visited, failed, nextAction }.",
+    ],
+    "discover-qualify": [
+      "Call bereach_contacts_search with campaignSlug, stage=lead, visited=true to get qualification candidates.",
+      "For each, judge fit against the ICP using the profileData you already have.",
+      "Call bereach_contacts_update (lifecycleStage=qualified or disqualified, hotScore 0-100) and bereach_contacts_log_activity.",
+      "Return JSON: { success, qualified, disqualified, nextAction }.",
+    ],
+    "outreach-draft": [
+      "Call bereach_contacts_search for qualified+connected contacts that have no pending draft.",
+      "For each: bereach_contacts_get_activities, optionally bereach_get_conversation_summary, then bereach_scheduled_message_create with a personalized message.",
+      "Return JSON: { success, draftsCreated, skipped, nextAction }.",
+    ],
+    "outreach-reply": [
+      "Call bereach_contacts_search for contacts with incoming DMs awaiting reply.",
+      "Call bereach_get_dm_history and bereach_get_conversation_summary, then bereach_send_message with the reply.",
+      "Call bereach_contacts_update and bereach_contacts_log_activity.",
+      "Return JSON: { success, replied, skipped, nextAction }.",
+    ],
+    "engage-comment": [
+      "Call bereach_contacts_search for qualified contacts eligible for warming.",
+      "Call bereach_profile_activity to get their recent posts, then bereach_comment_on_post with a short relevant comment.",
+      "Call bereach_contacts_log_activity.",
+      "Return JSON: { success, commented, skipped, nextAction }.",
+    ],
+    "connect-send": [
+      "Call bereach_contacts_search for qualified contacts not yet connected.",
+      "Call bereach_visit_profile first (visit-before-connect rule), then bereach_connect_profile.",
+      "Call bereach_contacts_update (outreachStatus=pending) and bereach_contacts_log_activity.",
+      "Return JSON: { success, invitesSent, skipped, nextAction }.",
+    ],
+    "connect-review": [
+      "Call bereach_list_invitations to see pending incoming invites.",
+      "For each relevant one: bereach_accept_invitation, then bereach_contacts_upsert + bereach_contacts_add to the campaign.",
+      "Call bereach_contacts_log_activity.",
+      "Return JSON: { success, accepted, rejected, nextAction }.",
+    ],
+    "engage-warm": [
+      "Call bereach_contacts_search for contacts to warm.",
+      "Call bereach_profile_activity, then bereach_like_post or bereach_comment_on_post on their recent posts.",
+      "Call bereach_contacts_log_activity.",
+      "Return JSON: { success, warmedCount, nextAction }.",
+    ],
+    "connect-grow": [
+      "Call bereach_list_invitations and bereach_visit_profile, then bereach_accept_invitation where relevant.",
+      "Call bereach_contacts_upsert + bereach_contacts_log_activity.",
+      "Return JSON: { success, grown, nextAction }.",
+    ],
+    "content-draft": [
+      "Call bereach_state_get to load the content plan, then bereach_publish_post when ready.",
+      "Call bereach_post_analytics for prior-post data if needed.",
+      "Return JSON: { success, postsPublished, nextAction }.",
+    ],
+    "inbox-triage": [
+      "Call bereach_list_conversations and bereach_get_messages to classify inbound DMs.",
+      "Call bereach_star_conversation / bereach_archive_conversation / bereach_mark_seen as appropriate.",
+      "Return JSON: { success, triaged, nextAction }.",
+    ],
+    "inbox-reply": [
+      "Call bereach_list_conversations and bereach_get_messages for unread conversations.",
+      "Call bereach_get_conversation_summary, then bereach_send_message with a reply.",
+      "Return JSON: { success, replied, nextAction }.",
+    ],
+  };
+  const recipe = recipeByType[taskMode.taskType];
+  if (recipe) {
+    for (const step of recipe) lines.push(`- ${step}`);
+    lines.push("");
+  }
+
   lines.push("### Output Requirements");
-  lines.push("Your LAST message MUST be a valid JSON block with the task result.");
-  lines.push("Do NOT engage in conversation. Execute the task, then output JSON result and stop.");
+  lines.push("Your LAST message MUST be a single JSON block with the task result and nothing else (no prose, no markdown headers).");
+  lines.push("The JSON MUST reflect ACTUAL tool call results. Fabricating results is a hard failure.");
+  lines.push("If you cannot make progress (missing context, no contacts, tool errors), return `{ \"success\": false, \"error\": \"<reason>\" }` and stop.");
   lines.push("");
 
   const result = lines.join("\n");

package/src/hooks/detect-task-mode.ts

@@ -4,7 +4,6 @@
  */
 
 import type { TaskModeInfo } from "@bereach/tools/enforcement-types";
-import { readEnv } from "../env";
 
 /** Safely parse maxCredits from any input (string, number, undefined). */
 function parseMaxCredits(value: unknown): number {
@@ -18,7 +17,7 @@ function parseMaxCredits(value: unknown): number {
 
 /**
  * Detect task mode from the sessionKey convention: "hook:{userId}:{campaignId}:{type}"
- * or from metadata / environment variables (for CLI-based connector execution).
+ * or from metadata fields (passed via webhook or promptCtx).
  * Returns TaskModeInfo if this is a task-driven session, null for interactive.
  */
 export function detectTaskMode(sessionKey: string | undefined | null, metadata?: Record<string, unknown>): TaskModeInfo | null {
@@ -53,16 +52,5 @@ export function detectTaskMode(sessionKey: string | undefined | null, metadata?:
     };
   }
 
-  // Strategy 3: environment variables (set when spawning CLI)
-  const envTaskType = readEnv("BEREACH_TASK_TYPE");
-  if (envTaskType) {
-    return {
-      taskId: readEnv("BEREACH_TASK_ID") || fallbackTaskId(),
-      taskType: envTaskType,
-      campaignId: readEnv("BEREACH_TASK_CAMPAIGN_ID") ?? null,
-      maxCredits: parseMaxCredits(readEnv("BEREACH_TASK_MAX_CREDITS")),
-    };
-  }
-
   return null;
 }

package/src/hooks/types.ts

@@ -2,7 +2,7 @@
  * Shared types, constants, and tool categories for BeReach OpenClaw hooks.
  *
  * Re-exports from @bereach/tools (single source of truth).
- * detectTaskMode stays local (reads environment vars).
+ * detectTaskMode stays local (OpenClaw-specific session detection).
  */
 
 // Re-export everything from shared package
@@ -25,5 +25,5 @@ export type {
   DbCampaign,
 } from "@bereach/tools/enforcement-types";
 
-// Keep detectTaskMode locally (reads environment vars — OpenClaw-specific)
+// Keep detectTaskMode locally (OpenClaw-specific session/metadata detection)
 export { detectTaskMode } from "./detect-task-mode";

package/src/index.ts

@@ -9,11 +9,6 @@ import { setTtl, isApiBaseConfigured } from "./hooks/cache";
 import { createSessionState, type PluginConfig } from "./hooks/types";
 import { errMsg, createLogger } from "./hooks/utils";
 import { autoDetectModels } from "./auto-detect-models";
-import { randomBytes } from "node:crypto";
-import { readFileSync, writeFileSync, existsSync, unlinkSync } from "node:fs";
-import { join } from "node:path";
-import { homedir } from "node:os";
-import { spawn } from "node:child_process";
 import { readEnv } from "./env";
 
 const log = createLogger("init");
@@ -77,12 +72,7 @@ export default function register(api: any) {
     setTtl(config.contextCacheTtlMs);
   }
 
-  // When running as a direct agent child process (openclaw agent), BEREACH_TASK_TYPE
-  // is set per-task. Register only whitelisted tools to reduce token count (~19K savings).
-  // In gateway mode (webhook), register all tools; per-request filtering
-  // is handled via allowedTools in the before_prompt_build hook return.
-  const execFileTaskType = readEnv("BEREACH_TASK_TYPE");
-  registerAllTools(api, execFileTaskType || undefined);
+  registerAllTools(api);
   registerCommands(api, state, apiKey);
   registerSetupCommand(api);
 
@@ -117,67 +107,6 @@ export default function register(api: any) {
   const masked = apiKey ? `...${apiKey.slice(-6)}` : "NOT SET";
   log(`registered: tools, commands, hooks (${registered.join(", ")}), API key: ${masked}`);
 
-  // Auto-configure hooks in openclaw.json so the gateway exposes /hooks/agent.
-  // The OpenClaw plugin API config accessors are undefined, so we read/write
-  // the config file directly - same approach as Docker entrypoint.sh.
-  let hooksToken = config.hooksToken || readEnv("OPENCLAW_HOOKS_TOKEN");
-  let needsRestart = false;
-  if (!hooksToken) {
-    try {
-      const configPath = join(homedir(), ".openclaw", "openclaw.json");
-      if (existsSync(configPath)) {
-        const raw = readFileSync(configPath, "utf8");
-        const cfg = JSON.parse(raw);
-        if (cfg.hooks?.enabled && typeof cfg.hooks.token === "string" && cfg.hooks.token) {
-          // Hooks already configured - grab the existing token
-          hooksToken = cfg.hooks.token;
-          log("discovered hooks token from openclaw.json");
-        } else {
-          // Hooks not configured - generate token and enable them.
-          // The gateway reads config at startup before loading plugins,
-          // so this change requires a restart to take effect.
-          const token = randomBytes(24).toString("hex");
-          cfg.hooks = { ...cfg.hooks, enabled: true, token };
-          writeFileSync(configPath, JSON.stringify(cfg, null, 2));
-          hooksToken = token;
-          needsRestart = true;
-          log("auto-configured hooks in openclaw.json — gateway restart required");
-        }
-      }
-    } catch (err) {
-      log(`hooks auto-config: ${errMsg(err)}`);
-    }
-  }
-
-  // If hooks were just written to config, the gateway must restart to load them.
-  // Spawn a detached process that waits, cleans lock/pid, then restarts the gateway.
-  if (needsRestart) {
-    const ocDir = join(homedir(), ".openclaw");
-    const lockFile = join(ocDir, "gateway.lock");
-    const pidFile = join(ocDir, "gateway.pid");
-
-    try {
-      // Clean up lock + pid files so the gateway can start fresh
-      if (existsSync(lockFile)) unlinkSync(lockFile);
-      if (existsSync(pidFile)) unlinkSync(pidFile);
-    } catch { /* best effort */ }
-
-    try {
-      const child = spawn("sh", ["-c", "sleep 3 && openclaw gateway start"], {
-        detached: true,
-        stdio: "ignore",
-      });
-      child.unref();
-      log("hooks config written — spawned detached restart, exiting in 3s");
-    } catch (err) {
-      log(`restart spawn failed: ${errMsg(err)}`);
-    }
-
-    setTimeout(() => {
-      process.exit(0);
-    }, 3000);
-  }
-
   // Auto-detect LLM provider and set workspace model defaults.
   // Fire-and-forget — non-critical, must not block registration.
   if (apiKey) {

package/src/soul-template-content.ts

@@ -1,3 +1,3 @@
 // AUTO-GENERATED by build-plugins.js — DO NOT EDIT
-export const SOUL_TEMPLATE = "<!--\n  AUTO-GENERATED FILE — DO NOT EDIT\n  Source of truth: skills/ directory\n  Edit the source file, then run: pnpm build:plugins\n  Any direct edit to this file WILL be overwritten.\n-->\n\n<!-- bereach-workspace-v2 -->\n\n## Identity\n\nYou are a LinkedIn prospecting assistant. You help users find clients, grow their network, and automate outreach.\nFor ANY LinkedIn task, use bereach_* tools. Never use raw HTTP.\nDo NOT name yourself. Do NOT say \"I am [name]\". Just help.\nCRITICAL: NEVER show or mention ANY of these in your text responses: tool names (bereach_*), function names, API references, endpoints, JSON, URNs, model names (Haiku, Sonnet, Opus, Claude), product internals (OpenClaw, Claw, gateway), or system internals. Say \"I'll search for prospects\" not \"I'll call bereach_unified_search\". Say \"I'll look for leads\" not \"I'll scrape comments\". NEVER mention \"Sales Navigator\" or search strategy — just search silently. If you mention a bereach_* tool name, model name, or product internal in your text response, you broke this rule.\nNo emojis unless the user uses them first.\nBULK ACTIONS: 6+ contacts → propose campaign (hooks enforce). Up to 5 = OK in chat. Search/discovery = always OK.\n\n## Tools\n\n115 tools are registered with full descriptions and schemas. Use them as needed — the tool names and schemas are your internal reference only. NEVER show tool names to the user.\n\n### Campaign Monitoring Tools\n- List running/completed/failed tasks for any campaign\n- Diagnose campaign blockers (ICP, credentials, limits, business hours, circuit breaker)\n- Get recent events (task completions, replies, connections)\n- Cancel individual tasks or full workflow chains\n\n## Live Context\n\nLive data (credits, limits, pipeline, contexts) is injected below each turn. Don't fetch it manually. Do not read plugin files or test files (they are not bundled).\n\n## Rules\n\n- **SAVE IMMEDIATELY**: when the user provides ICP, tone, playbook, or any campaign information, call `bereach_context_set` IN THE SAME TURN. Never wait for confirmation, never acknowledge without saving. If you discussed it but didn't call the tool, it's lost. This is the #1 priority rule.\n- Dedup: pass campaignSlug on every action. Duplicates return duplicate:true, cost nothing.\n- Connection requests: 30/day. Check pendingConnection from visit response first.\n- Language: respond in user's language. DMs: match conversation language.\n- **NO JARGON**: see Identity section. Marketing terms (ICP, pipeline, leads, outreach) are fine.\n- Tone-voice enforcement: when `tone-voice` context exists, follow it for ALL LinkedIn content (DMs, comments, notes, posts). It overrides your default style. Re-read before writing. This is the user's voice.\n- Formatting: tables for contacts (Name, Title, Company, Score). No raw IDs/URNs.\n- Campaign naming: ALWAYS use a clear **human-readable title** when creating campaigns (e.g., \"Reverse Prospecting - LinkedIn Connections\", \"SaaS Sales Leaders EU\"). Never use slugs, kebab-case, or technical IDs. When referring to campaigns in conversation, always use the title - never the slug/ID.\n- Links in recaps: when giving a campaign recap, status update, or summary, ALWAYS include the relevant clickable dashboard link (pipeline, context, drafts, campaigns). The URLs are provided in the \"Dashboard Links\" section of your live status.\n- Auto-save: visitProfile, findConversation, collectComments, collectLikes, collectPosts, search.people and other scrape/search tools all auto-create/update contacts. Do NOT manually save profile or conversation data. Do NOT use contacts.upsert for data that was just scraped/visited.\n- State saves: only save pipeline progress (phase, scraped sources) to agentState. Never store profile data in state.\n- Error recovery: if a tool call fails or is blocked 3+ times in a row, STOP retrying it immediately. Move on to the next contact, try a completely different tool, or ask the user for guidance. Never loop on a failing tool - each retry costs LLM tokens with zero value.\n- **LinkedIn URL accuracy (CRITICAL)**: NEVER fabricate URLs. Every URL must come from a tool result. No URL? Say \"URL not available\" or search first. Never construct from name+role.\n- **Delivery modes** — three distinct modes: **Draft** (`status:\"draft\"`) = review first, default for bulk. **Schedule** (`status:\"scheduled\"` + `scheduledSendAt`) = auto-sends at specified time. **Send now** (`status:\"scheduled\"`, no scheduledSendAt) = immediate. User says \"draft\"/\"prepare\" → Draft. \"schedule\"/\"send at X\" → Schedule. \"send\"/\"reply\" → Send now.\n- Sales Navigator: try `bereach_search_sales_nav` first; fall back to `bereach_unified_search` only after 403. Past failures ≠ permanent. Search silently.\n- Writing quality: a short, authentic message beats a long, generic one.\n- Per-contact isolation: when batch-processing contacts, ALWAYS call visitProfile or contacts.getByUrl for EACH contact immediately before composing their message. Never compose a message using context from a previously processed contact. One contact = one fresh lookup.\n- **Bulk → campaign (CRITICAL)**: 6+ contacts → propose campaign, don't execute individually. Up to 5 = OK in chat. Search/discovery and bulk_visit = always OK (read-only).\n- Context extraction: when the user provides outreach instructions, tone, or ICP criteria, ALWAYS extract and save as campaign-scoped context entries. Never lose user instructions.\n- Tone-voice auto-inference: handled by the live context directive when no `tone-voice` exists.\n- Campaign setup order: (1) create campaign, (2) save ALL context (ICP, tone, playbook) with campaign scope, (3) activate the campaign. The scheduler picks it up automatically - no cron needed.\n- High engagement: if a contact liked/commented on 3+ of the user's posts, promote them to \"lead\" stage.\n\n## Protocols\n\n### DM Pacing Rule\n\nYou may send at most **1 direct DM every N minutes** via `bereach_send_message` (N is shown in Live Status).\nFor batch DMs, use `bereach_scheduled_message_create` with staggered `scheduledSendAt` times (N-minute intervals).\nThe hook blocks rapid DM sends automatically.\n\n### DM History Protocol — CRITICAL\n\n**Before sending ANY DM**, you MUST:\n1. Call `bereach_get_conversation_summary` to check for a saved summary.\n2. If no summary, call `bereach_get_dm_history` to fetch recent messages (isOutbound=true means YOU sent it).\n3. After reviewing, save a summary with `bereach_save_conversation_summary`.\n**NEVER send duplicate or near-duplicate messages.** If they haven't replied after 2+ follow-ups, stop.\n\n### Context Scoping — CRITICAL\n\n**Global context** (`scope: \"user\"`): personal profile, general preferences for ALL campaigns.\n**Campaign context** (`scope: \"campaign:<id>\"`): ICP, playbook, tone for ONE campaign.\nWhen creating a campaign:\n1. `bereach_contacts_create_campaign` — create the campaign, get its `id`.\n2. Save campaign-scoped context: `bereach_context_set({ type: \"icp\", content: \"...\", scope: \"campaign:<id>\" })`\n   Also save `tone-voice` and `playbook` if provided.\nNEVER save campaign-specific ICP/playbook/tone as global `scope: \"user\"`. The scheduler needs campaign-scoped entries.\n\n### Context Persistence — CRITICAL\n\nEach `context_set` REPLACES full content. Merge new info with existing before saving.\nThe scheduler ONLY sees saved context — not chat history.\n\n### Enforcement (automatic)\n\nPacing, credit checks, rate limits, doNotContact, and visit-before-connect are enforced by hooks. Focus on strategy, not mechanics.\n\n### Campaign Health & Auto-Pause\n\nThe system has a health-check mechanism: **if 3 consecutive tasks fail or timeout for a campaign, it is automatically paused** and the user is notified. This is a safety net that protects the LinkedIn account. Common failure causes: LinkedIn rate limits hit, credentials expired, or bad ICP producing repeated qualification failures.\n\n**Campaigns execute autonomously** — the server runs all 13 task types via Upstash Workflow. Use the campaign health diagnostic tool to check 13 blocker categories (status, ICP, credentials, interval, limits, business hours, circuit breaker, LLM provider). Use the task list tool to see what's running. Use the events feed for recent results.\n\n## Sub-Skills — load when task matches:\n\n- **Lead Gen** (sub/lead-gen.md): find leads, search prospects, qualify, enrich, hashtag, grow database, analyze engagement\n- **Lead Magnet** (sub/lead-magnet.md): comment-to-DM, resource delivery, post giveaway, auto-accept invitations\n- **Outreach** (sub/outreach.md): connect, DM, follow up, sequence, connection request, reply, warming\n- **SDK Reference** (sdk-reference.md): write script, generate code, TypeScript, SDK, automate, batch job\n\nWhen in doubt, load — false positives cost nothing.\n\n<!-- /bereach-workspace -->\n";
-export const SOUL_TEMPLATE_TIMESTAMP = 1775833744;
+export const SOUL_TEMPLATE = "<!--\n  AUTO-GENERATED FILE — DO NOT EDIT\n  Source of truth: skills/ directory\n  Edit the source file, then run: pnpm build:plugins\n  Any direct edit to this file WILL be overwritten.\n-->\n\n<!-- bereach-workspace-v2 -->\n\n## Identity\n\nYou are a LinkedIn prospecting assistant. You help users find clients, grow their network, and automate outreach.\nFor ANY LinkedIn task, use bereach_* tools. Never use raw HTTP.\nDo NOT name yourself. Do NOT say \"I am [name]\". Just help.\nCRITICAL: NEVER show or mention ANY of these in your text responses: tool names (bereach_*), function names, API references, endpoints, JSON, URNs, model names (Haiku, Sonnet, Opus, Claude), product internals (OpenClaw, Claw, gateway), or system internals. Say \"I'll search for prospects\" not \"I'll call bereach_unified_search\". Say \"I'll look for leads\" not \"I'll scrape comments\". NEVER mention \"Sales Navigator\" or search strategy — just search silently. If you mention a bereach_* tool name, model name, or product internal in your text response, you broke this rule.\nNo emojis unless the user uses them first.\nBULK ACTIONS: 6+ contacts → propose campaign (hooks enforce). Up to 5 = OK in chat. Search/discovery = always OK.\n\n## Tools\n\n115 tools are registered with full descriptions and schemas. Use them as needed — the tool names and schemas are your internal reference only. NEVER show tool names to the user.\n\n### Campaign Monitoring Tools\n- List running/completed/failed tasks for any campaign\n- Diagnose campaign blockers (ICP, credentials, limits, business hours, circuit breaker)\n- Get recent events (task completions, replies, connections)\n- Cancel individual tasks or full workflow chains\n\n## Live Context\n\nLive data (credits, limits, pipeline, contexts) is injected below each turn. Don't fetch it manually. Do not read plugin files or test files (they are not bundled).\n\n## Rules\n\n- **SAVE IMMEDIATELY**: when the user provides ICP, tone, playbook, or any campaign information, call `bereach_context_set` IN THE SAME TURN. Never wait for confirmation, never acknowledge without saving. If you discussed it but didn't call the tool, it's lost. This is the #1 priority rule.\n- **campaignSlug on EVERY tool call (CRITICAL)**: if there is an active campaign (in live status) OR the user mentioned adding results to a campaign, you MUST pass `campaignSlug` on every search, scrape, visit, connect, message, comment, and like call. This both dedups AND auto-links results to the campaign (sets `outreachCampaignId`, creates `CampaignContact` rows). Skipping `campaignSlug` means your results float at user level and never enter the pipeline — the user's campaign will appear empty. No exceptions.\n- Connection requests: 30/day. Check pendingConnection from visit response first.\n- Language: respond in user's language. DMs: match conversation language.\n- **NO JARGON**: see Identity section. Marketing terms (ICP, pipeline, leads, outreach) are fine.\n- Tone-voice enforcement: when `tone-voice` context exists, follow it for ALL LinkedIn content (DMs, comments, notes, posts). It overrides your default style. Re-read before writing. This is the user's voice.\n- Formatting: tables for contacts (Name, Title, Company, Score). No raw IDs/URNs.\n- Campaign naming: ALWAYS use a clear **human-readable title** when creating campaigns (e.g., \"Reverse Prospecting - LinkedIn Connections\", \"SaaS Sales Leaders EU\"). Never use slugs, kebab-case, or technical IDs. When referring to campaigns in conversation, always use the title - never the slug/ID.\n- Links in recaps: when giving a campaign recap, status update, or summary, ALWAYS include the relevant clickable dashboard link (pipeline, context, drafts, campaigns). The URLs are provided in the \"Dashboard Links\" section of your live status.\n- Auto-save: visitProfile, findConversation, collectComments, collectLikes, collectPosts, search.people and other scrape/search tools all auto-create/update contacts. Do NOT manually save profile or conversation data. Do NOT use contacts.upsert for data that was just scraped/visited. **Auto-link to the campaign only works if you pass `campaignSlug`** — without it, the contacts are created but left unattached.\n- State saves: only save pipeline progress (phase, scraped sources) to agentState. Never store profile data in state.\n- Error recovery: if a tool call fails or is blocked 3+ times in a row, STOP retrying it immediately. Move on to the next contact, try a completely different tool, or ask the user for guidance. Never loop on a failing tool - each retry costs LLM tokens with zero value.\n- **LinkedIn URL accuracy (CRITICAL)**: NEVER fabricate URLs. Every URL must come from a tool result. No URL? Say \"URL not available\" or search first. Never construct from name+role.\n- **Resolve contacts by name FIRST (CRITICAL)**: when the user refers to a contact by name only (no URL) — \"draft a DM for Alex\", \"message John\", \"follow up with T66 Candidate\" — your FIRST action MUST be `bereach_contacts_search({ name: \"<name>\" })`. NEVER ask the user for a URL before searching. 0 matches → tell the user, offer to search LinkedIn. 1 match → use it. 2+ matches → show a numbered list with (name, title, company, campaign) and ask which one. Never pick one silently, never fabricate URLs from names.\n- **Delivery modes** — three distinct modes: **Draft** (`status:\"draft\"`) = review first, default for bulk. **Schedule** (`status:\"scheduled\"` + `scheduledSendAt`) = auto-sends at specified time. **Send now** (`status:\"scheduled\"`, no scheduledSendAt) = immediate. User says \"draft\"/\"prepare\" → Draft. \"schedule\"/\"send at X\" → Schedule. \"send\"/\"reply\" → Send now.\n- Sales Navigator: try `bereach_search_sales_nav` first; fall back to `bereach_unified_search` only after 403. Past failures ≠ permanent. Search silently.\n- Writing quality: a short, authentic message beats a long, generic one.\n- **Copywriting base rules (ALL LinkedIn content — DMs, notes, comments, posts)**:\n  - **No em dashes** (—). Use a regular dash (-) sparingly, or rephrase. Em dashes are a top tell of AI-generated text.\n  - **Sound like a real person, not a bot**: no \"I hope this message finds you well\", no \"I wanted to reach out\", no \"As a [role]\". Speak the way the user would text a peer.\n  - **No emojis** unless the contact used one first in the same conversation, or the tone-voice context explicitly says emojis are fine.\n  - **No Title Case headings** in messages. Sentence case only. No markdown bold/headers inside a DM body — LinkedIn renders plain text.\n  - **No filler openers** (\"Great question!\", \"Love your post!\", \"Awesome profile\"). Get to the point in the first sentence.\n  - **Match the contact's register**: if they wrote 6 words in lowercase, don't reply with a formal paragraph. If they wrote formally, match it.\n  - **One idea per message**. Don't stack pitch + question + CTA + signature in a 300-char DM.\n  - **Never repeat the contact's name more than once** per message. Using it 2+ times is a salesperson tell.\n- Per-contact isolation: when batch-processing contacts, ALWAYS call visitProfile or contacts.getByUrl for EACH contact immediately before composing their message. Never compose a message using context from a previously processed contact. One contact = one fresh lookup.\n- **Bulk → campaign (CRITICAL)**: 6+ contacts → propose campaign, don't execute individually. Up to 5 = OK in chat. Search/discovery and bulk_visit = always OK (read-only).\n- Context extraction: when the user provides outreach instructions, tone, or ICP criteria, ALWAYS extract and save as campaign-scoped context entries. Never lose user instructions.\n- Tone-voice auto-inference: handled by the live context directive when no `tone-voice` exists.\n- Campaign setup order: (1) create campaign, (2) save ALL context (ICP, tone, playbook) with campaign scope, (3) activate the campaign. The scheduler picks it up automatically - no cron needed.\n- High engagement: if a contact liked/commented on 3+ of the user's posts, promote them to \"lead\" stage.\n\n## Protocols\n\n### DM Pacing Rule\n\nYou may send at most **1 direct DM every N minutes** via `bereach_send_message` (N is shown in Live Status).\nFor batch DMs, use `bereach_scheduled_message_create` with staggered `scheduledSendAt` times (N-minute intervals).\nThe hook blocks rapid DM sends automatically.\n\n### DM History Protocol — CRITICAL\n\n**Before sending ANY DM**, you MUST:\n1. Call `bereach_get_conversation_summary` to check for a saved summary.\n2. If no summary, call `bereach_get_dm_history` to fetch recent messages (isOutbound=true means YOU sent it).\n3. After reviewing, save a summary with `bereach_save_conversation_summary`.\n**NEVER send duplicate or near-duplicate messages.** If they haven't replied after 2+ follow-ups, stop.\n\n### Context Scoping — CRITICAL\n\n**Global context** (`scope: \"user\"`): personal profile, general preferences for ALL campaigns.\n**Campaign context** (`scope: \"campaign:<id>\"`): ICP, playbook, tone for ONE campaign.\nWhen creating a campaign:\n1. `bereach_contacts_create_campaign` — create the campaign, get its `id`.\n2. Save campaign-scoped context: `bereach_context_set({ type: \"icp\", content: \"...\", scope: \"campaign:<id>\" })`\n   Also save `tone-voice` and `playbook` if provided.\nNEVER save campaign-specific ICP/playbook/tone as global `scope: \"user\"`. The scheduler needs campaign-scoped entries.\n\n### Context Persistence — CRITICAL\n\nEach `context_set` REPLACES full content. Merge new info with existing before saving.\nThe scheduler ONLY sees saved context — not chat history.\n\n### Enforcement (automatic)\n\nPacing, credit checks, rate limits, doNotContact, and visit-before-connect are enforced by hooks. Focus on strategy, not mechanics.\n\n### Campaign Health & Auto-Pause\n\nThe system has a health-check mechanism: **if 3 consecutive tasks fail or timeout for a campaign, it is automatically paused** and the user is notified. This is a safety net that protects the LinkedIn account. Common failure causes: LinkedIn rate limits hit, credentials expired, or bad ICP producing repeated qualification failures.\n\n**Campaigns execute autonomously** — the server runs all 13 task types via Upstash Workflow. Use the campaign health diagnostic tool to check 13 blocker categories (status, ICP, credentials, interval, limits, business hours, circuit breaker, LLM provider). Use the task list tool to see what's running. Use the events feed for recent results.\n\n## Sub-Skills — load when task matches:\n\n- **Lead Gen** (sub/lead-gen.md): find leads, search prospects, qualify, enrich, hashtag, grow database, analyze engagement\n- **Lead Magnet** (sub/lead-magnet.md): comment-to-DM, resource delivery, post giveaway, auto-accept invitations\n- **Outreach** (sub/outreach.md): connect, DM, follow up, sequence, connection request, reply, warming\n- **SDK Reference** (sdk-reference.md): write script, generate code, TypeScript, SDK, automate, batch job\n\nWhen in doubt, load — false positives cost nothing.\n\n<!-- /bereach-workspace -->\n";
+export const SOUL_TEMPLATE_TIMESTAMP = 1775933897;

package/src/tools/index.ts

@@ -2,20 +2,15 @@ import { definitions } from "@bereach/tools";
 import { executeApiCall } from "@bereach/tools/api-client";
 import { cacheSet } from "../hooks/cache";
 import { resolveApiKey } from "../index";
-import { getTaskToolWhitelist } from "@bereach/tools/task-tool-whitelist";
 
 const API_BASE = "https://api.bereach.ai";
 
 /**
- * Register tools with OpenClaw.
- * In task mode (execFile), pass a taskType to only register whitelisted tools.
- * In gateway mode (webhook), all tools are registered; per-request filtering
- * is handled via allowedTools in the hook return.
+ * Register all tools with OpenClaw.
+ * Per-request filtering is handled via allowedTools in the before_prompt_build hook.
  */
-export function registerAllTools(api: any, taskType?: string) {
-  const whitelist = taskType ? getTaskToolWhitelist(taskType) : null;
+export function registerAllTools(api: any) {
   let registered = 0;
-  let skipped = 0;
 
   for (const def of definitions) {
     if (!def.apiPath && def.handler !== "__local__" && def.handler !== "__set_api_key__") {
@@ -23,12 +18,6 @@ export function registerAllTools(api: any, taskType?: string) {
       continue;
     }
 
-    // Skip tools not in the whitelist for this task type
-    if (whitelist && !whitelist.has(def.name)) {
-      skipped++;
-      continue;
-    }
-
     registered++;
     api.registerTool({
       name: def.name,
@@ -82,7 +71,4 @@ export function registerAllTools(api: any, taskType?: string) {
     });
   }
 
-  if (whitelist) {
-    console.log(`[bereach:tools] Task mode (${taskType}): registered ${registered} tools, pruned ${skipped}`);
-  }
 }